Reporting help with ASA-SSM-10 IPS module?

Unanswered Question
Jan 15th, 2009
User Badges:


I have just had our ASA-SSM-10 module installed into our ASA5520. Is there any way I can the following:

1.) Setup scheduled reports to be emailed to me showing top attackers and victims?

2.) Send any alerts to our syslog server?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jens.becker Sat, 01/17/2009 - 06:17
User Badges:

No, the IPS doesn't support notifications sent by mail or connecting to syslog-daemons.

IPS only supports SDEE and SNMP.

For best effort of your Cisco IPS Sensor I recommend the CS-MARS as STM.

whiteford Sat, 01/17/2009 - 06:27
User Badges:

One thing I did manage to do was download Cisco's IPS Express Manager (much better than the standard IPS tool you get) and now email notifications when basd on my alerts.


This Discussion