In the Firewall and SSL/TLS Inspection logs I can see positive and negative results.But I see nothing at all in the ATP, IPS, App Filter, Malware, and Zero-Day logs. Would they only show negative events -- i.e. malware in a download -- or should this tell me that I think I have them doing something and they are not? (Antivirus and IPS are shown as running in Services.)
It's possible that everything's running and examining the appropriate streams of data but there's just nothing there. That would be good. But is there any way to check that this is the case: that the appropriate data is being examined but nothing is found?
This thread was automatically locked due to age.
