topic AIP-SSM 10 & Email Notification in Network Security

AIP-SSM 10 & Email Notification

balsheikh — Sun, 10 Mar 2019 10:55:08 GMT

Hi there,

How could I configure the IPS module for email notification for certain events !!

Regards,

Re: AIP-SSM 10 & Email Notification

irisrios — Mon, 31 Dec 2007 21:17:56 GMT

You have the option of configuring SNMP alerts for events. However syslog or e-mail option is available only when you use VMS or CS-MARS.

http://www.cisco.com/en/US/docs/security/security_management/vms/ips_mc/2.2/user/guide/ch08a.html

Re: AIP-SSM 10 & Email Notification

bernardl — Wed, 16 Jan 2008 17:11:24 GMT

I have created PERL scripts that run on a UNIX server to automate IPS signature updates without VMS/CSM. The second script includes a string search of the AIP SSM 10's Event Log to email the result of the update attempt. You could use that if you know what the Event Log entries look like for which you want email notification. The app is on my website:

http://www.lhb-consulting.com/pages/apps . Good luck.

--Lisa

Re: AIP-SSM 10 & Email Notification

balsheikh — Thu, 17 Jan 2008 10:57:04 GMT

Hi Lisa,

It's really useful script but I notice that it still not supported IPS v 6.0 and almost the running IPS specially AIP-SSM came with V 6.0

Regards,

Re: AIP-SSM 10 & Email Notification

bernardl — Thu, 17 Jan 2008 15:13:42 GMT

It should work under IPS v6.0. The only obvious change is the FTP directory name on Cisco's site to download the update, which isn't the part that you are interested in anyway.