Ips report of protections

[Oscar_David_Gom]

Hi, 

Do you know how to get a report of all of protections and its action prevent/detect/inactive in r80.10? I cant figure out how to generate the filter in smart event.

Thanks. 

[Timothy_Hall]

From the IPS Protections screen select Actions...Export view to dump all signatures and their profile settings into a csv as shown:

[Oscar_David_Gom]

Yes, that's a good option for export, but I would like to generate a report of it with smart event, is there some way that you know for that?

[Timothy_Hall · Accepted solution]

SmartEvent correlates and displayed logged events, not elements of the security policy configuration (at least not directly).  So unless you could somehow trigger every possible IPS Protection thus generating a log for each one, SmartEvent can't be used to dump a portion of the configuration in that fashion.

[Oren_Koren]

Hey,

you can try and use the following report:

https://community.checkpoint.com/t5/Logging-and-Reporting/IPS-utilization-report-Smart-View/td-p/605...

Thanks,

Oren