How to create a trigger for the IPS critical alert?

[garster]

Hello,

We have alerts setup to immediately sent emails for "critical" IPS items.  In order to audit this and verify it is working, how can we purposely trigger this alert for a CnC callback and trigger the email alert on the IPS?

Regards,

Gary

[Chris_Atkinson]

Did you try something like CheckMe?

http://www.cpcheckme.com/

Or the test URLs linked from the top right here:

https://threatwiki.checkpoint.com/threatwiki/public.htm

[garster]

Hi Chris,

I did try that but it does not seem to trigger the alert email.

[Tal_Paz-Fridman]

You would need to make sure that the specific IPS Protection that is triggered has Mail under Track

[Chris_Atkinson]

sk115236 lists the protections that CheckMe should trigger (if activated) for reference.