topic IDSM-2 email question in Network Security https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364663#M53274 <P>I have a 6500 with an IDSM-2.&nbsp; I'm getting request for email notification on certain signature hits and need to know if it's possible before spending a lot of time configuring.. Thanks in advance for any replies...</P><P></P><P>Here's the scenairo:</P><P></P><P>I currently have the IDSM-2 inline on the outside of our network....&nbsp; </P><P></P><P></P><P>Internet ---&gt; Router----&gt; IDSM-2---FWSM---&gt; Router ----&gt;internal network</P><P></P><P>I know this is not the conventional way to use (by cisco's TAC eng), but it works in this solution.&nbsp; I have multiple PAT addresses on the FWSM. If one is blocked by the IDSM-2 they'd like to get a notification. That would mean something inside is generating suspicious traffic outbound. They have internal systems that check this as well but they'd like an email just for the PATs only...</P><P></P><P>All other blocks will go to through the normal notification processes.... </P> Sun, 10 Mar 2019 13:05:07 GMT Garrison Botts 2019-03-10T13:05:07Z IDSM-2 email question https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364663#M53274 <P>I have a 6500 with an IDSM-2.&nbsp; I'm getting request for email notification on certain signature hits and need to know if it's possible before spending a lot of time configuring.. Thanks in advance for any replies...</P><P></P><P>Here's the scenairo:</P><P></P><P>I currently have the IDSM-2 inline on the outside of our network....&nbsp; </P><P></P><P></P><P>Internet ---&gt; Router----&gt; IDSM-2---FWSM---&gt; Router ----&gt;internal network</P><P></P><P>I know this is not the conventional way to use (by cisco's TAC eng), but it works in this solution.&nbsp; I have multiple PAT addresses on the FWSM. If one is blocked by the IDSM-2 they'd like to get a notification. That would mean something inside is generating suspicious traffic outbound. They have internal systems that check this as well but they'd like an email just for the PATs only...</P><P></P><P>All other blocks will go to through the normal notification processes.... </P> Sun, 10 Mar 2019 13:05:07 GMT https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364663#M53274 Garrison Botts 2019-03-10T13:05:07Z IDSM-2 email question https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364664#M53275 <HTML><HEAD></HEAD><BODY><P> There isn't an option for Emailing alerts from the IPS Sensors (including the IDSM).</P><P>You can configure all your blocking signatures to generate an SNMP Trap and have your SMNP Receiver alert you to the event.</P><P></P><P>_ bob</P></BODY></HTML> Tue, 19 Nov 2013 17:02:27 GMT https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364664#M53275 rhermes 2013-11-19T17:02:27Z IDSM-2 email question https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364665#M53278 <HTML><HEAD></HEAD><BODY><P>Yes there is no Emailing option in IPS. You have to configure the SNMP trap for the same.</P></BODY></HTML> Thu, 13 Feb 2014 22:07:10 GMT https://community.cisco.com/t5/network-security/idsm-2-email-question/m-p/2364665#M53278 Ravi Singh 2014-02-13T22:07:10Z