IDS / IPS - Was it blocked or not?

When you get an alert I get an e-mail telling me about the alert but unlike other systems I have used in the past it doesn’t tell me if it was blocked or not? Should this be added to help reassure the user?

1 Like

FYI you might want to blur the alta URL if that is your private/self hosted controller.

Cheers - I am using the cloud controller at the moment but removed it just in case.

If the severity on the Block option was set to match the severity of that alert, then it would have been blocked. We will definitely consider adding a note as to whether it was blocked, though.

3 Likes