Forum Discussion

saidshow_251381's avatar
saidshow_251381
Icon for Cirrostratus rankCirrostratus
Jun 13, 2016

Can I view only the ASM Events Triggered by IP Intelligence?

Hi All,

 

We have IP Intelligence enabled in monitoring mode and I see the events that are alarmed in the ASM Event log however I can't see how I can view only the events that alarmed as part of IPI.

 

When I look at the advanced search categories I can see the "Access from Malicious IP Address" violation which is triggered under the "Anonymous Proxy" category of IPI however I am not able to see any other violations that relate to IPI. It would be great if I could restrict the logs as per the 10 categories of IP Intelligence. Is there any way to do that that I am missing?

 

Thank you.

 

  • Nevermind Guys - It's there.

     

    In the advanced search there is a drop down titled "Source IP Address Intelligence" where all the 10 IPI categories can be selected. Thank you.

     

  • Nevermind Guys - It's there.

     

    In the advanced search there is a drop down titled "Source IP Address Intelligence" where all the 10 IPI categories can be selected. Thank you.

     

  • Nevermind Guys - It's there.

     

    In the advanced search there is a drop down titled "Source IP Address Intelligence" where all the 10 IPI categories can be selected. Thank you.

     

  • Nevermind Guys - It's there.

     

    In the advanced search there is a drop down titled "Source IP Address Intelligence" where all the 10 IPI categories can be selected. Thank you.