Intrusion Email Alerts - FirePOWER - FMC

[Fantas]

Hi,

I have enabled default IPS Policy "Balanced Security and Connectivity" on FMC.

Now wana setup automatic email alerting in case any Intrusion events.

I can send email to my self when test it but not getting any events.

Am I missing anything here.

[Anupam Pavithran]

Hi Fantas,

You can set intrusion mail alert under,

FMC --> Policies --> Actions --> Alerts --> Intrusion Mail

[Fantas]

Thanks ,

Can I get weekly or monthly IPS Intrusion reports on my email.

Like FMC will generate report based on customized template and will send me email with report attachment.

[Anupam Pavithran]

Hi Fantas,

Yes, that can be done.

System --> Tools --> Scheduling --> Add Task

1. Job type : Report

2. Schedule task to run : Recurring

3. Repeat Every : Specify the frequency

4. Run at : The time to run the report

5. Job Name : A name for the job

6. Report Template : Select the template you need

7. Email Status To : Recipient mail address

[Fantas]

Many Thanks,

I have set it up.

Last Question

I wana see report in pdf format plus for Intrusion events and for Users accessing any dodgy Internet sites or even normal public sites like facebook.com , twitter etc