How to schedule reporting in Cisco ASA IPS module

Unanswered Question

I am implementing an IPS module in cisco ASA 5510 but i am unable to find any options to log the events/reports continuosly .

  1. Is there any options to schedule reporting ?
  2. Any cisco software can achive this ?
  3. Is this module use circular logging
  4. how many days log will IPS module keeps in database.
I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mkodali Thu, 03/04/2010 - 10:58

I would suggest using IME application software which is available for free download from http://www.cisco.com/en/US/products/ps9610/index.html to monitor the IPS Module. It has excellent reporting and eventing capability and a persistent data store at the front end. If you are not interested this path then IPS Module has a remote subscription based web interface to subscribe to retrieve events. The client has to implement a script to open a connection and stay subscribed for the types of events desired. The IPS Module internally has a fixed size event store which gets wrapped once it gets full replacing older events by newer ones. Depending on the rate of events inserted the wrapping may range.

Actions

This Discussion