I do not support the IPS devices but have been asked to see if I can gather some info. On the FMC webpage, I have selected Intrusions->Events. I specified a date range and I have a page of events listed. If I then click VIew All button, I see all of the individual events for the time period. Is there a way for me to export that list so that I can review it outside of the interface? I need to be able to review the Source and Destination info along with the Message generated.
Using Cisco Firepower Management Center for VMWare Version 6.2.3.
you have only few options. one is reporting you can create a reports but even in them it wont give you all the ip address source and destination with ports. FMC is great tool for IPS/IDS but not very good when it come to reports or putting off the information from the FMC.
hm.. unless you dig in and create a syslog and sent to a external syslog servers. but even in that you have to filter it.
HIDoes anyone know if there is an easier way than the belowQ. I check connection events for IOC's when requested and sometimes i have to check many url's which i am presently doing one url at a time and is very time consuming, is there a way to check mult...
Cisco Identity Services Engine (ISE) gives you intelligent Integrated protection through intent-based policy and compliance solution. ISE supports external MDM vendor integration to help the customers to look for compliance of a dev...
This video provides the steps to configure the Cisco Threat Response (CTR) and ESA Integration.
This is live on the portal:https://video.cisco.com/video/6159336218001
And on YouTube:https://www.youtube.com/watch?v=UCKIdx5rdFg
I need to migrate from C170 to C190 and have already match to the same Firmware Version. I have a question. Is there any method that can export and import the configuration file instead of form cluster ?