I do not support the IPS devices but have been asked to see if I can gather some info. On the FMC webpage, I have selected Intrusions->Events. I specified a date range and I have a page of events listed. If I then click VIew All button, I see all of the individual events for the time period. Is there a way for me to export that list so that I can review it outside of the interface? I need to be able to review the Source and Destination info along with the Message generated.
Using Cisco Firepower Management Center for VMWare Version 6.2.3.
you have only few options. one is reporting you can create a reports but even in them it wont give you all the ip address source and destination with ports. FMC is great tool for IPS/IDS but not very good when it come to reports or putting off the information from the FMC.
hm.. unless you dig in and create a syslog and sent to a external syslog servers. but even in that you have to filter it.
When we said the word “hybrid” in the past, it usually recalled the image of a new variety of plant or maybe an electric car. These days, it applies to the workplace too.
The future of work isn’t “changing” to a h...
Thanks for attending our Ask the Experts (ATXs) session! Here’s the post-session resources for easy reference.
New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology q...
Cisco Secure Endpoint
New packages fit for every organization
Every Cisco Secure Endpoint (formerly AMP for Endpoints) package comes with Cisco SecureX built-in. It’s our cloud-native platform that integrates all your security solutions into one view wit...
Our Cisco experts and guests chat about how the integration of Cisco Secure Firewall + Secure Workload is securely accelerating application delivery by allowing NetOps to start running at DevOps speed, and what that means for business success.