How to schedule reporting in Cisco ASA IPS module

Unanswered Question
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mkodali Thu, 03/04/2010 - 10:58
User Badges:
  • Cisco Employee,

I would suggest using IME application software which is available for free download from http://www.cisco.com/en/US/products/ps9610/index.html to monitor the IPS Module. It has excellent reporting and eventing capability and a persistent data store at the front end. If you are not interested this path then IPS Module has a remote subscription based web interface to subscribe to retrieve events. The client has to implement a script to open a connection and stay subscribed for the types of events desired. The IPS Module internally has a fixed size event store which gets wrapped once it gets full replacing older events by newer ones. Depending on the rate of events inserted the wrapping may range.

Actions

This Discussion