cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Ips report of protections

Jump to solution

Hi, 

Do you know how to get a report of all of protections and its action prevent/detect/inactive in r80.10? I cant figure out how to generate the filter in smart event.

 

Thanks. 

0 Kudos
1 Solution

Accepted Solutions

Re: Ips report of protections

Jump to solution

SmartEvent correlates and displayed logged events, not elements of the security policy configuration (at least not directly).  So unless you could somehow trigger every possible IPS Protection thus generating a log for each one, SmartEvent can't be used to dump a portion of the configuration in that fashion.

 

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
0 Kudos
4 Replies

Re: Ips report of protections

Jump to solution

From the IPS Protections screen select Actions...Export view to dump all signatures and their profile settings into a csv as shown:

export.jpg

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Re: Ips report of protections

Jump to solution
Yes, that's a good option for export, but I would like to generate a report of it with smart event, is there some way that you know for that?
0 Kudos

Re: Ips report of protections

Jump to solution

SmartEvent correlates and displayed logged events, not elements of the security policy configuration (at least not directly).  So unless you could somehow trigger every possible IPS Protection thus generating a log for each one, SmartEvent can't be used to dump a portion of the configuration in that fashion.

 

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
0 Kudos
Employee+
Employee+

Re: Ips report of protections

Jump to solution
0 Kudos