Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I've configured FMC to send Connection Events to an external syslog but not everything is being sent. I've taken some tcpdumps and only the events with some relevant impact are sent. I'm interested in sending every event, even the allowed ones. Any t...
Great, I found the option and made the change as you said but I'm still not getting the events sent. Maybe I'm using the wrong facility(Local0)? I set the level to Debug everywhere but the amount of logs do not change.
I do not see an option "Advanced Settings" when I edit my Intrusion Policy. I'm going into Policies>Intrusion>Edit and I see the attached window. To clarify, I want to forward all the events generated to my configured syslog server.
I'm doing it on an individual rule but it's the only rule that is logging on the ACP. See the attachment. And I'm getting some of the events, just not the allowed events which I also want to send. So the connection is established, might it be somethi...
