We have IME (but we have well over 10 IPS's), I know how to setup alerts from it; but we also have CSM as well. We need to send out alerts on IPS anomalies to our Information Security staff.
CSM's Report Manager interface will allow you to e-mail prewritten IPS reports such as Top Signatures, Top Attackers, etc. CSM's Event Viewer interface does not currently have any native e-mail capabilities. I am including a link below to a feature enhancement request for this. CSM 4.3 will have some additional alerting capabilities related to managed device health and performance. The only other Cisco option will be MARS though this product is currently EOL.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
