How to set separate email alerts for different rules

[draganzec]

Hi,

we use IPS to protect two separate units - different zones/networks with different rules applied but same Access Control policy.

Is it possible to configure separate email alerts for these two units and how?

Thanx.

Br,

Dragan

[yogdhanu]

Hi Dragon,

If you have created the alert using FMC policy >Action>Alert, It will send all the impact flag alerts irrespective of device or rule. So the answer is no.

You can , however, use syslog alerting per intrusion policy in advance settings section to send logs to syslog.

Hope it helps,

Yogesh