Alert when a specific IPS protection is matched

[Abbas_Khumanpur]

Hi All,

Many might know this, but if you are looking to see how you can be alerted when a specific IPS signature has been matched - Follow the below steps. 

My customer need to be alerted to see if they had any hits for the new IPS signature for SIGRed (CVE-2020-1350). 

This can be easily achieved using Smart Event. See below screenshot. 

First identify the IPS Signature that you need alerting for. In our example here it is the protection for CVE-2020-1350:

Once done, then go to the Smart Event Settings and configure alerting as shown below:

Hope this has been helpful. 

-Abbas