Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

event specific e-mail alerts (from VMS)

How can I create an e-mail alert that includes actual information about the event that triggered it?

Like for example, knowing a TCP Syn Host Sweep occured and met the threshold I set for my alert is faaar less useful than knowing 10.10.10.10 triggered it and not only met the threshold but triggered the alert 10,000 times.

I am running VMS 2.3 managing 5.x IPS sensors.

If VMS cannot do this then its officially a piece of shit.

Also, if VMS cannot do this, can MARS or CSM?

1 REPLY
Community Member
131
Views
0
Helpful
1
Replies
CreatePlease to create content