The Manager can send alert information to third-party repositories, such as SNMP servers and syslog servers. Further, you can configure your Sensor to forward syslog notifications directly to a syslog server, thereby ensuring that the Sensor forwards alerts to a server other than that assigned to the Manager.
In addition to SNMP and syslog notifications, the Manager can also be configured to notify you through email, pager, or script of detected attacks.
For the alert notifications for the Sensor, select Manager → <Admin Domain Name> → Setup → Notification → IPS Events.
Alert notifications are forwarded to syslog servers based on the configuration. Within the configuration, settings notification destination form only one aspect. The Manager and Sensor send notifications depending on the attack, the attack severity, or both.
Tip
The Manager forwards all the audit records to a syslog server over a TLS secured connection in real-time.