<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic event specific e-mail alerts (from VMS) in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/event-specific-e-mail-alerts-from-vms/m-p/641943#M87953</link>
    <description>&lt;P&gt;How can I create an e-mail alert that includes actual information about the event that triggered it?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Like for example, knowing a TCP Syn Host Sweep occured and met the threshold I set for my alert is faaar less useful than knowing 10.10.10.10 triggered it and not only met the threshold but triggered the alert 10,000 times.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am running VMS 2.3 managing 5.x IPS sensors.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If VMS cannot do this then its officially a piece of shit.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also, if VMS cannot do this, can MARS or CSM?&lt;/P&gt;</description>
    <pubDate>Sun, 10 Mar 2019 10:23:39 GMT</pubDate>
    <dc:creator>slug420</dc:creator>
    <dc:date>2019-03-10T10:23:39Z</dc:date>
    <item>
      <title>event specific e-mail alerts (from VMS)</title>
      <link>https://community.cisco.com/t5/network-security/event-specific-e-mail-alerts-from-vms/m-p/641943#M87953</link>
      <description>&lt;P&gt;How can I create an e-mail alert that includes actual information about the event that triggered it?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Like for example, knowing a TCP Syn Host Sweep occured and met the threshold I set for my alert is faaar less useful than knowing 10.10.10.10 triggered it and not only met the threshold but triggered the alert 10,000 times.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I am running VMS 2.3 managing 5.x IPS sensors.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If VMS cannot do this then its officially a piece of shit.  &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also, if VMS cannot do this, can MARS or CSM?&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 10:23:39 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/event-specific-e-mail-alerts-from-vms/m-p/641943#M87953</guid>
      <dc:creator>slug420</dc:creator>
      <dc:date>2019-03-10T10:23:39Z</dc:date>
    </item>
    <item>
      <title>Re: event specific e-mail alerts (from VMS)</title>
      <link>https://community.cisco.com/t5/network-security/event-specific-e-mail-alerts-from-vms/m-p/641944#M87955</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;See &lt;A class="jive-link-custom" href="http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&amp;amp;forum=Security&amp;amp;topic=Intrusion%20Prevention%20Systems/IDS&amp;amp;CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddd0907" target="_blank"&gt;http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&amp;amp;forum=Security&amp;amp;topic=Intrusion%20Prevention%20Systems/IDS&amp;amp;CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddd0907&lt;/A&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 22 Dec 2006 23:17:44 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/event-specific-e-mail-alerts-from-vms/m-p/641944#M87955</guid>
      <dc:creator>mkirbyii</dc:creator>
      <dc:date>2006-12-22T23:17:44Z</dc:date>
    </item>
  </channel>
</rss>

