Collecting IPS logs

Unanswered Question
Feb 26th, 2009


I have SSM20 moudule cofigured on our ASA and would like to receive all the logs on a seperate server or file to review our security audit people.

Even though IPS event viewer and getting events on IPS event page could not find a place to save.

Can someone advise me how to collect those logs to a seperate file or on a seperate server please.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jens.becker Mon, 03/02/2009 - 13:46

It's not possible to write IPS Eventlogs to a separate file.

You can send the IPS-Events over snmp-traps to a management station (configure "Enable detailed traps for alerts" to see detailed informations)


This Discussion