No MX summary on Security Center

Solved
ChrisL2021
Getting noticed

No MX summary on Security Center

Hi there,

 

    I have setup Meraki SDWAN with MX65W which established the umbrella connector to HK (primary) and Mumbai (backup). I have enabled AMP and IDS/IPS.

 

However, under Org>monitor>security center...there is no MX events.

 

Can I know why?

 

My MX65W software version is:
Current version: MX 17.10.2
1 Accepted Solution
ww
Kind of a big deal
Kind of a big deal

In the security  center click on filter. And select clean and unknown

View solution in original post

5 Replies 5
Brash
Kind of a big deal
Kind of a big deal

Have you had any detections?

Events won't be populated unless ips has enforced any detections/preventions

ChrisL2021
Getting noticed

Hi Brash,

 

    Under Security &SDWAN>configure>threat protection:

         Intrustion detection and protection:

            Mode: detection

            Resuleset: Balanced

 

Is it sufficient?

alemabrahao
Kind of a big deal
Kind of a big deal

This is because there was no event detected. Wait a little longer and surely if something is detected it will be displayed on the page.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
ww
Kind of a big deal
Kind of a big deal

In the security  center click on filter. And select clean and unknown

ChrisL2021
Getting noticed

Thanks buddy. Yes, the key is to select Malware, clean and unknown!! 

Get notified when there are additional replies to this discussion.