Reporting help with ASA-SSM-10 IPS module?

Unanswered Question
Jan 15th, 2009
User Badges:

Hi,


I have just had our ASA-SSM-10 module installed into our ASA5520. Is there any way I can the following:


1.) Setup scheduled reports to be emailed to me showing top attackers and victims?


2.) Send any alerts to our syslog server?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jens.becker Sat, 01/17/2009 - 06:17
User Badges:

No, the IPS doesn't support notifications sent by mail or connecting to syslog-daemons.


IPS only supports SDEE and SNMP.

For best effort of your Cisco IPS Sensor I recommend the CS-MARS as STM.

whiteford Sat, 01/17/2009 - 06:27
User Badges:

One thing I did manage to do was download Cisco's IPS Express Manager (much better than the standard IPS tool you get) and now email notifications when basd on my alerts.

Actions

This Discussion