Cisco IPS Express Manager issues with generating report/logs

[Dulal Ray]

Hi,

I am new to IPS,

I have configured IPS in "in-line open" mode.

Current IPS IOS version is 7.1(8)E4 and the Signature version on IPS is 836.

Firewall model 5520 and the IPS model no is IPS-SSM-20.

I am using cisco IPS express manager 7.2 to monitor my IPS.

Unfortunately we are not getting any event like,

- Top Victim

- Top Attacker

- Top Signatures etc.

and also not able to generate any reports for the same.

We are able to see traffic on the interface of IPS continuously increasing.

[Dulal Ray]

Someone please reply

[Maykol Rojas]

Hi Ray;

Have you gone through this document?

http://www.cisco.com/c/en/us/support/docs/security/ips-4200-series-sensors/111659-ips-email-ime-config.html

On the show service policy from the firewall, are you able to see packet input/output?

Let us know.