CirrostratusCan I view only the ASM Events Triggered by IP Intelligence?
Hi All,
We have IP Intelligence enabled in monitoring mode and I see the events that are alarmed in the ASM Event log however I can't see how I can view only the events that alarmed as part of IPI.
When I look at the advanced search categories I can see the "Access from Malicious IP Address" violation which is triggered under the "Anonymous Proxy" category of IPI however I am not able to see any other violations that relate to IPI. It would be great if I could restrict the logs as per the 10 categories of IP Intelligence. Is there any way to do that that I am missing?
Thank you.
Nevermind Guys - It's there.
In the advanced search there is a drop down titled "Source IP Address Intelligence" where all the 10 IPI categories can be selected. Thank you.
