Endpoint Protection

 View Only
  • 1.  Intrusion Prevention Alert notification

    Posted Jun 24, 2009 08:40 PM
    Is it possible to get an alert notfication email where the attack type is "Intrusion Prevention" ONLY?
    I know I can setup alerts for client security alert which has NTP events, but I'm looking for intrusion prevention alerts only.


  • 2.  RE: Intrusion Prevention Alert notification

    Posted Jun 25, 2009 01:59 AM
    Log in to SEPM and go to Report and create a schedule. Select  NTP as Report Type and Full Report  in select report.


  • 3.  RE: Intrusion Prevention Alert notification

    Posted Jun 26, 2009 01:18 AM
    Thanks and nice to hear that ur problem is rectified. get back to community for any Tech Assistance


  • 4.  RE: Intrusion Prevention Alert notification

    Posted Jul 17, 2009 04:29 PM

    I'm still not able to find what I'm looking for. I want to get an alert when an Intrusion Prevention occurs as show in the screen shot below.

    imagebrowser image



  • 5.  RE: Intrusion Prevention Alert notification
    Best Answer

    Posted Jul 18, 2009 01:19 AM
    For NTP both Firewall and IPS works together and are interdpendent on each other so only NTP notification condition is given.
    However it would be a good idea to have to view them under two diffrent types so that we can diffrenciate between the traffic. 


  • 6.  RE: Intrusion Prevention Alert notification

    Posted Jul 18, 2009 01:30 AM
    I agree with vikram that it would be much helpful if we were able to view the lodgs separately, i was also having some issue regarding IPS a little while back, where i was getting notification of traffick being blocked from some ip, but later i was not being able to retrieve that. 


  • 7.  RE: Intrusion Prevention Alert notification

    Posted Jul 18, 2009 10:13 PM
    So I guess currently there's no way to get an email notification when an IPS event is triggered.

    Thanks guys.


  • 8.  RE: Intrusion Prevention Alert notification

    Posted Jul 19, 2009 02:05 AM
    Just IPS I don't think ...but Firewall + IPS  will work


  • 9.  RE: Intrusion Prevention Alert notification



  • 10.  RE: Intrusion Prevention Alert notification

    Posted Jul 19, 2009 11:57 AM
    Well even this article says the same thing

    "To specify the type of Network Threat Protection activity, check one of the following check boxes:
    For the attacks and events that the firewall detects or the Intrusion Prevention signatures detect, check Network Threat Protection events"