I have gone through the "Reporting" section of the 8.2 Manger Administration Guide, as well as through the reporting options on the appliance itself, but couldn't find anything that could help me.
I would like to know if there is any way to get a simple report of changes in attack settings in a given time window (a month, for instance)? Currently I can fetch this information by going to Policy > Intrusion Prevention > IPS Policies > Active Revision. But then I don't want to have to go through this process for every single policy of every domain.
Any help will be appreciated!
Under Manage>Troubleshooting> User Activity Log
1) Select All users
2) Select IPS Policy from the list
3) max events is 50000
4) set time period
You will get a list of changes on policies/rule sets/interfaces.
For policy/rule set changes, you can click on the policy change (column on the right hyperlink) which will then bring up more details, including the commit comments (if any )