topic Re: IPS email notification in Network Security

IPS email notification

ccna_security — Sun, 29 Mar 2020 12:06:29 GMT

Dear all. I configured IPS on firepower and configured it to send me email when it is being triggered. I configured it on Policy-Action->Alert->Intrusion Email. All IPS rules has been selected. Approximately two days later of configuring IPS notification, i observed that Select All box unchecked like on attachment. could you please tell me why it is unchecked by itself.

Re: IPS email notification

Marvin Rhoads — Sun, 29 Mar 2020 14:30:10 GMT

Do you perhaps have a job that is set to run and accept Firepower IPS recommendations?

Re: IPS email notification

ccna_security — Sun, 29 Mar 2020 14:58:32 GMT

Hello Marvin
Yes you are right, i use firepower recommendation. What should i do now. What is your recommendation

Re: IPS email notification

ccna_security — Mon, 30 Mar 2020 04:53:17 GMT

Hello Marvin

Do you think it is normal that IPS email notification rules changes automatically every time Firepower Recommendation being updated?

Re: IPS email notification

Marvin Rhoads — Wed, 01 Apr 2020 09:31:53 GMT

I'm not positive but it is the only thing I could think would change it without you having done it yourself.

You could open a TAC case to confirm.

Re: IPS email notification

ccna_security — Wed, 01 Apr 2020 11:30:51 GMT

Thank you Marvin. i am going to open TAC regarding this issue.