Hello I have been evaluating the firewall analyzer for a week or two and so far I like what I see, but there are some features I think I am missing.
First off, I am running an ASA. The syslog messages are sent to a host on the inside. I have configured the local LAN address as Intranet.
I am only seeing "IN" traffic, no out traffic on the live event logs. Do I need to configure more than one interface?
In addition...all of my traffic is being classified as "unclassified" even though I'm sure there are other types of traffic moving through.
I did search through the previous questions and I did not find anything quite like my own situation, but if you have already answered these questions please just show me the links.