topic Re: IPS traffic report in Network Security

IPS traffic report

Niss.comps — Sat, 30 Dec 2023 11:54:26 GMT

Hi all, I am using FMC 7.2 to manage ftd2130, ASA555 and ASA5525. How can I generate report for all traffic that has been inspected by my IPS policy on ASA555 and ASA5525

Thank you guys

Re: IPS traffic report

balaji.bandi — Sat, 30 Dec 2023 12:21:25 GMT

If you seeing Intrusion Event - from that you can generate report :

Choose Overview > Summary > Intrusion Event Graphs.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/events-intrusion.html?bookSearch=true

Re: IPS traffic report

alptechexpert — Tue, 02 Jan 2024 12:24:09 GMT

To generate a report for all traffic that has been inspected by your IPS policy on ASA555 and ASA5525 using FMC 7.2, follow these steps:

Access the Firepower Management Center (FMC) by entering its IP address or hostname in a web browser.
Log in with your administrative credentials.
Navigate to the "Overview" section by clicking on the "Overview" tab.
Click on "Reporting."
Click "Report Templates" to access the report templates available in your FMC system.
Select the desired report template that suits your needs. You can customize the report by modifying the filters, fields, and other settings as needed.
Click "Generate Report" to create the report for the traffic inspected by your IPS policy on ASA555 and ASA5525.
The report will be generated based on the selected report template and the traffic data collected by your ASA555 and ASA5525 devices. Make sure that the devices are properly configured to collect and forward the necessary traffic data to the FMC for report generation.