Reporting help with ASA-SSM-10 IPS module?

Unanswered Question
Jan 15th, 2009

Hi,

I have just had our ASA-SSM-10 module installed into our ASA5520. Is there any way I can the following:

1.) Setup scheduled reports to be emailed to me showing top attackers and victims?

2.) Send any alerts to our syslog server?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jens.becker Sat, 01/17/2009 - 06:17

No, the IPS doesn't support notifications sent by mail or connecting to syslog-daemons.

IPS only supports SDEE and SNMP.

For best effort of your Cisco IPS Sensor I recommend the CS-MARS as STM.

whiteford Sat, 01/17/2009 - 06:27

One thing I did manage to do was download Cisco's IPS Express Manager (much better than the standard IPS tool you get) and now email notifications when basd on my alerts.

Actions

This Discussion