IPS Report issue

[gsenna]

Hi,          We configure in our server FortiAnalyzer, the IPS Report, this report run daily and didnt return data, show normally the message "No matching log data for this report", this issue could be     config problems or only didnt have data to return, how can i confirm this, in Analyzer has another place that i can see the origin of data.      Regards   

[chall_FTNT]

If the chart in question is cased upon attack logs, check in log view for the time period to ensure there are attack logs for that device.

Otherwise, try running a test query on the dataset associated with that chart.

[darwin_FTNT]

Can test your setup by downloading a test virus file on:

http://www.eicar.org/anti_virus_test_file.htm

You should get a block page triggered from activated utm profiles (e.g., ips, av, malicious urldb, etc.).