02-13-2013 01:44 PM - edited 03-10-2019 05:53 AM
Does anyone know when CSM version 4.4 will be out and will the functionality ever exist where the CSM can send an email alert if a high or medium signature gets triggered. The IPS Manager Express (IME) has this function but the CSM currently does not. Currently I am using both the CSM and IME, one for email alerting (IME) and the other for updating our IPS's and for monitoring. Ideally I would like to do away with the IME.
02-13-2013 02:42 PM
I too am waiting for such a functionality.
In the meantime I have created a custom event filter that triggers on severity 60 and higher - this sets an 'snmp alert' action. The IPS itself forward an SNMP trap to an NMS and I convert it to email at that point.
It's not very sophisticated but it does let me get alerts with some information in an automated fashion.
02-19-2013 02:16 AM
That is the only way I have found to be able to do it too.
jp.senior wrote:
I too am waiting for such a functionality.
In the meantime I have created a custom event filter that triggers on severity 60 and higher - this sets an 'snmp alert' action. The IPS itself forward an SNMP trap to an NMS and I convert it to email at that point.
It's not very sophisticated but it does let me get alerts with some information in an automated fashion.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide