Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Oscar_David_Gom
Contributor
Contributor
Jump to solution

Ips report of protections

Hi, 

Do you know how to get a report of all of protections and its action prevent/detect/inactive in r80.10? I cant figure out how to generate the filter in smart event.

 

Thanks. 

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
Legend Legend
Legend

SmartEvent correlates and displayed logged events, not elements of the security policy configuration (at least not directly).  So unless you could somehow trigger every possible IPS Protection thus generating a log for each one, SmartEvent can't be used to dump a portion of the configuration in that fashion.

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com

View solution in original post

0 Kudos
4 Replies
Timothy_Hall
Legend Legend
Legend

From the IPS Protections screen select Actions...Export view to dump all signatures and their profile settings into a csv as shown:

export.jpg

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
Oscar_David_Gom
Contributor
Contributor
Yes, that's a good option for export, but I would like to generate a report of it with smart event, is there some way that you know for that?
0 Kudos
Timothy_Hall
Legend Legend
Legend

SmartEvent correlates and displayed logged events, not elements of the security policy configuration (at least not directly).  So unless you could somehow trigger every possible IPS Protection thus generating a log for each one, SmartEvent can't be used to dump a portion of the configuration in that fashion.

 

Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com
0 Kudos
Oren_Koren
Employee Alumnus
Employee Alumnus
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events