Collecting IPS logs

[pemasirid]

Hi,

I have SSM20 moudule cofigured on our ASA and would like to receive all the logs on a seperate server or file to review our security audit people.

Even though IPS event viewer and getting events on IPS event page could not find a place to save.

Can someone advise me how to collect those logs to a seperate file or on a seperate server please.

thanks

[jens.becker]

It's not possible to write IPS Eventlogs to a separate file.

You can send the IPS-Events over snmp-traps to a management station (configure "Enable detailed traps for alerts" to see detailed informations)