12-24-2007 05:11 AM - edited 03-10-2019 03:55 AM
Hi there,
How could I configure the IPS module for email notification for certain events !!
Regards,
12-31-2007 01:17 PM
You have the option of configuring SNMP alerts for events. However syslog or e-mail option is available only when you use VMS or CS-MARS.
http://www.cisco.com/en/US/docs/security/security_management/vms/ips_mc/2.2/user/guide/ch08a.html
01-16-2008 09:11 AM
I have created PERL scripts that run on a UNIX server to automate IPS signature updates without VMS/CSM. The second script includes a string search of the AIP SSM 10's Event Log to email the result of the update attempt. You could use that if you know what the Event Log entries look like for which you want email notification. The app is on my website:
http://www.lhb-consulting.com/pages/apps . Good luck.
--Lisa
01-17-2008 02:57 AM
Hi Lisa,
It's really useful script but I notice that it still not supported IPS v 6.0 and almost the running IPS specially AIP-SSM came with V 6.0
Regards,
01-17-2008 07:13 AM
It should work under IPS v6.0. The only obvious change is the FTP directory name on Cisco's site to download the update, which isn't the part that you are interested in anyway.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide