Question to Endpoint Security for Linux Firewall

[rokasporch]

Hi Community,

in https://kc.mcafee.com/corporate/index?page=content&id=KB89711 (How to view files scanned by Endpoint Security for Linux On-Access Scan (using the On-Access Scan activity monitor)) there is a way to see what the On Access Scanner do.

Is for the Linux Firewall a simmilar way to go, to find out which events are appears?

Thanks

[AdithyanT]

Hi @rokasporch 

Thanks for posting here! I am no expert with this, Did you try looking at /opt/McAfee/mfw/var/mfefirewall.log? Maybe an expert with ENS FW for Linux can chip in if this does not help!

[gururaj · Accepted solution]

log location for ENSL firewall

[root@CLDDVPOCSPT0013 mfefirewall]# pwd
/opt/McAfee/mfw/var/mfefirewall

[root@CLDDVPOCSPT0013 mfefirewall]# ll
total 12432
-rw-------. 1 root root 10485683 Sep 7 17:46 mfefirewall.log
-rw-------. 1 root root 2234717 Sep 11 03:10 mfefirewall.log00000
[root@CLDDVPOCSPT0013 mfefirewall]#