Email alert

[Alexander_Simon]

 I want receive alerts to email from checkpoint about critical event. For examle: my IPS detect critical event and i receive message by email.

how can i do it?

[Matt_Ricketts]

SmartEvent has an Automatic Reaction where it can email you. IPS Critical events should be a predefined query, but if not, one could be created. Then enable the Automatic Reaction to Email you.

[Alexander_Simon]

How can i configure notification for threat emulation?

[Matt_Ricketts]

You will need to create a query within SmartEvent with the keyword of "Malicious" from the verdict field and then set your Automatic Reaction. Something like the following should do the trick.

[_Val_]

Look into "Successive events" in IPS

[_Val_]

We have had this question the last year, please look here: https://community.checkpoint.com/thread/7389-mail-alert-and-logging-for-ips-protection