IPS Event Log

[ricdgr]

Hi there, Is there a way to log the threats detected by the IPS (not the packets). I can' t see anything IPS related on my " UTM Security Log" . Thanks.

[qxu_FTNT]

Hi Ricdgr, Please give more detailed about the problem, i.e topology, configuration. Thanks,

[Dave_Hall]

Is there a way to log the threats detected by the IPS (not the packets). I can' t see anything IPS related on my " UTM Security Log" .

I believe IPS events show up in the attack log, which should be enabled by default when you enable sql-logging.

[emnoc]

Yes you can log events in the log. You need to enable this under your ips sensor set action action of selected rules log logging of selected rules IIRC the default action is to log.