AIP-SSM 10 & Email Notification

balsheikh · ‎12-24-2007

Hi there,

How could I configure the IPS module for email notification for certain events !!

Regards,

irisrios · ‎12-31-2007

You have the option of configuring SNMP alerts for events. However syslog or e-mail option is available only when you use VMS or CS-MARS.

http://www.cisco.com/en/US/docs/security/security_management/vms/ips_mc/2.2/user/guide/ch08a.html

bernardl · ‎01-16-2008

I have created PERL scripts that run on a UNIX server to automate IPS signature updates without VMS/CSM. The second script includes a string search of the AIP SSM 10's Event Log to email the result of the update attempt. You could use that if you know what the Event Log entries look like for which you want email notification. The app is on my website:

http://www.lhb-consulting.com/pages/apps . Good luck.

--Lisa

balsheikh · ‎01-17-2008

Hi Lisa,

It's really useful script but I notice that it still not supported IPS v 6.0 and almost the running IPS specially AIP-SSM came with V 6.0

Regards,

bernardl · ‎01-17-2008

It should work under IPS v6.0. The only obvious change is the FTP directory name on Cisco's site to download the update, which isn't the part that you are interested in anyway.