i have IPS 6.2 , added in MARS 6.0 .
the mars polls events from the IPS normally , &no problem with that.
but my issue : i configured some P2P signatures in the IPS with the actions (deny packet inline , produce alert , log pair packets). in the IPS device manager i can see in the events tap that the these flows dropped by the IPS as i need , & in the IP Logging tap i can see the dropped packets logs which is normal,
but my issue is that "i want a report or query from the MARS to show me the denied packets by the IPS " .