topic Re: How to create a trigger for the IPS critical alert? in Firewall & Security Management https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186374#M54652 <P>Did you try something like CheckMe?</P> <P><A href="http://www.cpcheckme.com/" target="_blank">http://www.cpcheckme.com/</A></P> <P>Or the test URLs linked from the top right here:</P> <P><A href="https://threatwiki.checkpoint.com/threatwiki/public.htm" target="_blank">https://threatwiki.checkpoint.com/threatwiki/public.htm</A></P> Thu, 13 Jul 2023 14:33:17 GMT Chris_Atkinson 2023-07-13T14:33:17Z How to create a trigger for the IPS critical alert? https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186248#M54651 <P>Hello,</P><P>We have alerts setup to immediately sent emails for "critical" IPS items.&nbsp; In order to audit this and verify it is working, how can we purposely trigger this alert for a CnC callback and trigger the email alert on the IPS?</P><P>Regards,</P><P>Gary</P> Wed, 12 Jul 2023 16:05:45 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186248#M54651 garster 2023-07-12T16:05:45Z Re: How to create a trigger for the IPS critical alert? https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186374#M54652 <P>Did you try something like CheckMe?</P> <P><A href="http://www.cpcheckme.com/" target="_blank">http://www.cpcheckme.com/</A></P> <P>Or the test URLs linked from the top right here:</P> <P><A href="https://threatwiki.checkpoint.com/threatwiki/public.htm" target="_blank">https://threatwiki.checkpoint.com/threatwiki/public.htm</A></P> Thu, 13 Jul 2023 14:33:17 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186374#M54652 Chris_Atkinson 2023-07-13T14:33:17Z Re: How to create a trigger for the IPS critical alert? https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186482#M54653 <P>Hi Chris,</P><P>I did try that but it does not seem to trigger the alert email.</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 14 Jul 2023 16:50:25 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186482#M54653 garster 2023-07-14T16:50:25Z Re: How to create a trigger for the IPS critical alert? https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186492#M54654 <P>You would need to make sure that the specific IPS Protection that is triggered has <STRONG>Mail</STRONG> under <STRONG>Track</STRONG></P> Fri, 14 Jul 2023 19:50:26 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186492#M54654 Tal_Paz-Fridman 2023-07-14T19:50:26Z Re: How to create a trigger for the IPS critical alert? https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186510#M54655 <P><SPAN>sk115236 lists the protections that CheckMe should trigger (if activated) for reference.</SPAN></P> Sat, 15 Jul 2023 03:17:41 GMT https://community.checkpoint.com/t5/Firewall-Security-Management/How-to-create-a-trigger-for-the-IPS-critical-alert/m-p/186510#M54655 Chris_Atkinson 2023-07-15T03:17:41Z