Hi there,
I have setup Meraki SDWAN with MX65W which established the umbrella connector to HK (primary) and Mumbai (backup). I have enabled AMP and IDS/IPS.
However, under Org>monitor>security center...there is no MX events.
Can I know why?
Solved! Go to solution.
In the security center click on filter. And select clean and unknown
Have you had any detections?
Events won't be populated unless ips has enforced any detections/preventions
Hi Brash,
Under Security &SDWAN>configure>threat protection:
Intrustion detection and protection:
Mode: detection
Resuleset: Balanced
Is it sufficient?
This is because there was no event detected. Wait a little longer and surely if something is detected it will be displayed on the page.
In the security center click on filter. And select clean and unknown
Thanks buddy. Yes, the key is to select Malware, clean and unknown!!