Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

AIP-SSM 10 & Email Notification

Hi there,

How could I configure the IPS module for email notification for certain events !!

Regards,

4 REPLIES
Silver

Re: AIP-SSM 10 & Email Notification

You have the option of configuring SNMP alerts for events. However syslog or e-mail option is available only when you use VMS or CS-MARS.

http://www.cisco.com/en/US/docs/security/security_management/vms/ips_mc/2.2/user/guide/ch08a.html

Community Member

Re: AIP-SSM 10 & Email Notification

I have created PERL scripts that run on a UNIX server to automate IPS signature updates without VMS/CSM. The second script includes a string search of the AIP SSM 10's Event Log to email the result of the update attempt. You could use that if you know what the Event Log entries look like for which you want email notification. The app is on my website:

http://www.lhb-consulting.com/pages/apps . Good luck.

--Lisa

Community Member

Re: AIP-SSM 10 & Email Notification

Hi Lisa,

It's really useful script but I notice that it still not supported IPS v 6.0 and almost the running IPS specially AIP-SSM came with V 6.0

Regards,

Community Member

Re: AIP-SSM 10 & Email Notification

It should work under IPS v6.0. The only obvious change is the FTP directory name on Cisco's site to download the update, which isn't the part that you are interested in anyway.

486
Views
0
Helpful
4
Replies
СоздатьДля создания публикации, пожалуйста в систему