IPS Query

[Anukalp S]

Hi..

I have a query about IPS, i am running AIP-SSM-10 in my environment and my license has expired so would my IPS still prevent from malicious packets or attackers. Reason i am asking this as i could see packet are coming on SSM interface but not seeing any events logs.

[Julio Carvajal]

Hello Anukalp,

It will prevent attacks it just that you will loose certain features (global correlation,auto-signature update)

Regards

Julio

[Anukalp S]

hello jcarvaja..

Currently i am unable to see any events in logs but earlier it was appearing..so is it expected behaviour..?

[sokakkar]

Hi Anukalp,

It depends what events were showing up earlier. Do you have any saved events?

-

Sourav