I want receive alerts to email from checkpoint about critical event. For examle: my IPS detect critical event and i receive message by email.
how can i do it?
SmartEvent has an Automatic Reaction where it can email you. IPS Critical events should be a predefined query, but if not, one could be created. Then enable the Automatic Reaction to Email you.
How can i configure notification for threat emulation?
You will need to create a query within SmartEvent with the keyword of "Malicious" from the verdict field and then set your Automatic Reaction. Something like the following should do the trick.
Look into "Successive events" in IPS
We have had this question the last year, please look here: Mail Alert and Logging for IPS Protection
Retrieving data ...