IPS Event Viewer 5.2

[jshelmer]

To the Cisco IPS team, thank you for updating the IEV to 5.2. From what I've seen so far, it's a very nice improvement to 5.1.

Email alerts are very nice to have. The only thing really missing from a SMB perspective is better reporting. Top 10's are nice, but I would rather be able to report on all Alerts. And a Weekly / Monthly summary would be nice also.

Thank you again for updating this free product and keeping it up to date.

[DFiore]

Jon,

Were there any snags in updating to 5.2?

Did you have to re-add your devices?

I agree with your comments for better "basic" reporting. I've been parsing the export file since v4.1 (and v5.1)with some success. It works OK if you have the time to play in a spreadsheet.

Let us know how "seamless" the upgrade went.

Thanks,

Dave

[DFiore]

Jon,

One more thing... Is the v5.2 help file updated with new information? Or was that in the text file with the update?

Dave

[jshelmer]

Yes, the upgrade was seamless. Took just a minute or so, and then a reboot.

As to the Help file, it does appear to be updated with the latest information for IEV 5.2. I just quickly looked, and the information is there for adding Email alerts, Configuring Refresh cycles, etc.

[DFiore]

Jon,

Thanks for the info! One more question... Did it blow out the exiting data for MySQL? And/or when you are in IEV and you select "File, Database Administration, Export Database Tables" you still see the Archive Tables?

I blew out my data tables when I upgraded IEV from v4.1 to v5.1. I want to make sure this does not happen again.

Thanks for the reply in advance!

Dave

[jshelmer]

Dave-

No, it didn't blow out the tables. All of mine are there since July. Thanks!

-Jon