CSM Alarming for IPS Events

[Florian Sontheim]

Hi Community,

i´m new to Cisco Security Manager. Is it possible to trigger an Email Alarm when a High Risk IPS Event comes in? How can i configure this task?

Thank you,

Florian

[Miguel Morinigo]

HI Florian,

This thread is old, but I would like to let me know if you got answer to your question, because I have the same doubt, and I have not found a place where talk about it.

I have version CSM 4.3, I hope next release will be able to send events via email, it would be helpful,because the report is usefull but very limited.

Thanks

--

[Florian Sontheim]

Hi Miguel,

sadly i haven´t found Email Alarming directly in CSM. I solved it this way:

I configured a Trap Receiver directly in the Cisco IPS Module. Every high risk event triggers a SNMP Trap. On the Trap Receiver itself i configured Email Alarming when this Trap comes in. Now the Administrator is informed and could log in to CSM and do deeper analyzing of the event with the CSM Software.

Best Regards,

Florian