Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 2 answers
  • Subscribers 28 subscribers
  • Views 701 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS Logging

Paul McGinnie

How does one enable logging (so one can see it in the Log Viewer in the management web interface) of IPS events.

Every time I have a IPS problem, I get email notifications but the IPS Log Viewer tab is empty - how can i get it to populate?

Regards,

    Paul McGinnie

SFOS 19.0.0 GA-Build317 on own hardware



This thread was automatically locked due to age.
Parents
  • 0

    Hello ,

    Thank you for reaching out to the community, in order to see the logging events of the IPS, ensure under the firewall rule the option: "Log firewall traffic." is enabled. 
    Also check under the Intrusion prevention > IPS Polices > IPS protection is enabled. Here you can also see number firewall rules using IPS.
    And Under the System services > Log settings > IPS. Is that enabled ?

  • 0 in reply to Vivek Jagad

    Hi - thanks for the quick reply. All but one of my rules has logging turned on, and IPS Protection is enables (and it records it is used by 44 rules). However, I still have literally nothing in the IPS Log Viewer tab, not just nothing relevant - zero entries.

    Is there anything that might be blocking this?

    Many thanks,

    Paul McGinnie

  • 0 in reply to Paul McGinnie

    are you facing this particular issue only with the IPS logs or rest of the log entries are too not updating or show absolutely no entries ? 

Reply Children