Intrusion Prevention Alert notification

bjohn's picture

Is it possible to get an alert notfication email where the attack type is "Intrusion Prevention" ONLY?
I know I can setup alerts for client security alert which has NTP events, but I'm looking for intrusion prevention alerts only.

Ajitjha's picture

Log in to SEPM and go to

Log in to SEPM and go to Report and create a schedule. Select  NTP as Report Type and Full Report  in select report.

Regards'
Ajit Jha
TechSuport Engineer
STS

Ajitjha's picture

Thanks and nice to hear that

Thanks and nice to hear that ur problem is rectified. get back to community for any Tech Assistance

Regards'
Ajit Jha
TechSuport Engineer
STS

bjohn's picture

I'm still not able to find

I'm still not able to find what I'm looking for. I want to get an alert when an Intrusion Prevention occurs as show in the screen shot below.

imagebrowser image

Vikram Kumar-SAV to SEP's picture

Its not there

For NTP both Firewall and IPS works together and are interdpendent on each other so only NTP notification condition is given.
However it would be a good idea to have to view them under two diffrent types so that we can diffrenciate between the traffic. 

Celebrating 2 years as a community member....

Sapta's picture

I agree with vikram

I agree with vikram that it would be much helpful if we were able to view the lodgs separately, i was also having some issue regarding IPS a little while back, where i was getting notification of traffick being blocked from some ip, but later i was not being able to retrieve that. 

bjohn's picture

So I guess currently there's

So I guess currently there's no way to get an email notification when an IPS event is triggered.

Thanks guys.

Vikram Kumar-SAV to SEP's picture

Just IPS

Just IPS I don't think ...but Firewall + IPS  will work

Celebrating 2 years as a community member....

Vikram Kumar-SAV to SEP's picture

@peterpan

Well even this article says the same thing

"To specify the type of Network Threat Protection activity, check one of the following check boxes:
For the attacks and events that the firewall detects or the Intrusion Prevention signatures detect, check Network Threat Protection events" 

Celebrating 2 years as a community member....