Hi, We need to exclude the source IP address of our external vulnerability scanner, so it will not be blocked by the IPS.The point is to simulate external attacks without IPS protection.Adding an access rule on the top with no IPS inspection is not a...

Hi, we need to collect FTD configuration changes logs in SIEM, which are mainly performed via FMC.On ASA we are just collecting 111010 syslog messages, but on FTD's no 111010 messages are sent, only 111008 and in each log the username is enable_1.We ...

Hi,we are trying to decrease the number of deny logs logged in our SIEM.The approach is to disable message 106023 and to log only 106100, by adding "deny ip any any log" at the end of all access lists. This way we are receiving summarized deny logs i...