topic Re: ACC Behaviour in General Topics

ACC Behaviour

bmorris1 — Wed, 27 Apr 2016 13:20:09 GMT

Hello everyone!

I've got a question about the behaviour of the new ACC in 7.0 and above.

I can apply a global filter for the action of deny.

When I do this, the graphs show no data, even if I click refresh.

If I click 'jump to logs' with the filter still in place then I can see the logs/data in there ok. Removing all ACC filters allows the ACC graphics to populate properly.

Anyone else get similar behaviour is this expected? This seems a little off to me, I've tried clearing the ACC but this hasn't helped either.

thanks,

Ben

Re: ACC Behaviour

Raido_Rattameister — Thu, 28 Apr 2016 09:24:24 GMT

Do you mean this view?

Screenshot taken from 7.0.4

Re: ACC Behaviour

bmorris1 — Thu, 28 Apr 2016 09:31:45 GMT

Hi Raido,

No I mean like this below:

thanks,

Ben

Re: ACC Behaviour

reaper — Thu, 28 Apr 2016 09:38:04 GMT

blocked connections will not have a byte count or sessions created on the dataplane so that may explain why there wouldn't be a graph

Re: ACC Behaviour

bmorris1 — Thu, 28 Apr 2016 10:40:11 GMT

Hi Reaper,

I'm still a little confused as the log shows a byte count, my understanding is that the data is recieved by the management plane to record the log, so if no byte count on the dataplane.. how come there is one in the log? No session ID as none is installed.

thanks,

Ben