You have enabled Cisco IOS IPS on a router in your network. However, you are not seeing expected events on your monitoring system (such as Cisco IME). On the router, you see events being captured. What is the next step in troubleshooting the problem?
A.
verify thatsyslog is configured to send events to the correct server
B.
verify SDEE communications
C.
verify event action rules
D.
verify that the IPS license is valid
I get that B is correct, but why is “A” not also correct? The IPS can forward events via syslog AND SDEE.
Ken, you are right but in this case I guess the key is that they mention that the monitoring system in this case is Cisco IME, which uses SDEE communications.