We have Policy Rule to allow Admin console access to MCafee.
When i access Firewall via Admin console i can see the Logs under the audit for this connection.
Also we have Policy rule to allow ssh access to device.
When i ssh to device then audit i see no logs.
Need to know is this default behaviour?
As per my understanding ---- there should be no logs generated when connection is initated from firewall or terminated into firewall.