topic Re: IPs system events and restart in Network Security https://community.cisco.com/t5/network-security/ips-system-events-and-restart/m-p/928353#M80188 <HTML><HEAD></HEAD><BODY><P>Simply go into your IPS and create an "Event Action Filter." Simply modify the source address with that of your scanning system. You can leave the rest pretty much stock or, adjust the destination to the subnet of your DMZ. Also, you'll want to keep an eye on the areas to subtract. Making sure to take away the deny actions, and if necessary, reporting as well. </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_event_monitoring.html" target="_blank">http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_event_monitoring.html</A></P></BODY></HTML> Fri, 02 May 2008 18:05:00 GMT htarra 2008-05-02T18:05:00Z IPs system events and restart https://community.cisco.com/t5/network-security/ips-system-events-and-restart/m-p/928352#M80185 <P>Hi,</P><P>I am looking at monitoring the IDS system events like adding users/sensor application restart,interface down with a SDEE client.Does system events like this get logged in detail to the event store to be picked up by the API ...or is there something i need to do with my CIPS ver 6 to get it across with verbose messages .</P><P>Thanks and appreciate</P> Sun, 10 Mar 2019 11:05:04 GMT https://community.cisco.com/t5/network-security/ips-system-events-and-restart/m-p/928352#M80185 maheshbalasub75 2019-03-10T11:05:04Z Re: IPs system events and restart https://community.cisco.com/t5/network-security/ips-system-events-and-restart/m-p/928353#M80188 <HTML><HEAD></HEAD><BODY><P>Simply go into your IPS and create an "Event Action Filter." Simply modify the source address with that of your scanning system. You can leave the rest pretty much stock or, adjust the destination to the subnet of your DMZ. Also, you'll want to keep an eye on the areas to subtract. Making sure to take away the deny actions, and if necessary, reporting as well. </P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_event_monitoring.html" target="_blank">http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_event_monitoring.html</A></P></BODY></HTML> Fri, 02 May 2008 18:05:00 GMT https://community.cisco.com/t5/network-security/ips-system-events-and-restart/m-p/928353#M80188 htarra 2008-05-02T18:05:00Z