IPS Logging

Hello Paul McGinnie,

Thank you for reaching out to the community, in order to see the logging events of the IPS, ensure under the firewall rule the option: "Log firewall traffic." is enabled. 
Also check under the Intrusion prevention > IPS Polices > IPS protection is enabled. Here you can also see number firewall rules using IPS.
And Under the System services > Log settings > IPS. Is that enabled ?

Hello Paul McGinnie,

Thank you for reaching out to the community, in order to see the logging events of the IPS, ensure under the firewall rule the option: "Log firewall traffic." is enabled. 
Also check under the Intrusion prevention > IPS Polices > IPS protection is enabled. Here you can also see number firewall rules using IPS.
And Under the System services > Log settings > IPS. Is that enabled ?

Hi - thanks for the quick reply. All but one of my rules has logging turned on, and IPS Protection is enables (and it records it is used by 44 rules). However, I still have literally nothing in the IPS Log Viewer tab, not just nothing relevant - zero entries.

Is there anything that might be blocking this?

Many thanks,

Paul McGinnie

are you facing this particular issue only with the IPS logs or rest of the log entries are too not updating or show absolutely no entries ? 

My firewall log is full, my email has entries etc. IPS is blank!

In another thread I show the ips.log file from the firewall itself - so something is happening.

Regards,

    Paul

If possible try restarting the IPS service from System services > Services > IPS > STOP/RESTART/START

Turning on logging for the rule is only one part. Did you enable logging of IPS in System Services > Log Settings?