Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

Cisco Employee

FireSIGHT System generates connection events although logging is disabled

Although all Connection Logging options are disabled in an Access Control policy, my Sourcefire FireSIGHT System still generates a Connection Event.

  • Firepower / FireSIGHT System
Everyone's tags (1)
1 REPLY
Cisco Employee

A Connection Event is

Reason

A Sourcefire FireSIGHT System generates a Connection Event when an Intrusion Event is generated. A Connection Event is generated on the web interface of the Sourcefire FireSIGHT Management Center for the following reasons:

  • Intrusion Block
  • Intrusion Monitor

 

Solution

If this feature is undesired, it may be disabled from the shell using the following command:

> configure log-ips-connection disable
515
Views
0
Helpful
1
Replies
This widget could not be displayed.