Chapter 17. Using Cisco IPS Manager Express Correlation, Reporting, Notification, and Archiving

This chapter covers the following topics:

• Overview: In this section, we review how the Cisco IME is used for event correlation, generating reports based on events, notification of events, and archiving of such events.

• Configuring Event Reporting in Cisco IME: This section covers the use of built-in and customized reports, and how they can be shared and archived for viewing later.

• Using Notifications in Cisco IME: This section covers the use of email notifications that are sent to administrators based on configured thresholds.

Overview

Cisco IPS Manager Express (IME) has built-in tools that allow the creation of reports that are based on events ...

Get CCNP Security IPS 642-627 Official Cert Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial