Cisco Meraki AMP & IDP rapport
reviewed
I
Irving Rios
We would like to inquire about the possibility of adding functionality to monitor IPS and IDS settings within Liongard. Specifically, we are interested in monitoring the following: Whether AMP (Advanced Malware Protection) is enabled or disabled The mode and ruleset for Intrusion Detection and Prevention.
Being able to monitor these features.
A
Abriyanna Turner
Merged in a post:
Cisco Meraki AMP & IDS Monitoring
I
Irving Rios
We would like to request a new feature for the Cisco Meraki inspector within Liongard. Specifically, we’re looking for alerting capabilities related to Advanced Malware Protection (AMP) and Intrusion Detection and Prevention (IDS/IPS) settings on Meraki devices.
Feature Details:
Advanced Malware Protection (AMP):
Monitor and alert based on the current mode (e.g., Enabled/Disabled, Detection only, Blocking).
Notify if AMP is disabled or changed from its baseline state.
Intrusion Detection and Prevention (IDS/IPS):
Monitor the IDS/IPS status (e.g., detection mode vs. prevention mode).
Alert on changes to the ruleset (e.g., Security vs. Balanced).
Notify if IDS/IPS is disabled or altered from the standard configuration.
Use Case: These security features are critical to maintaining network protection. Having automated visibility and alerts through Liongard would help us ensure Meraki security configurations remain in their intended state and are not inadvertently changed or misconfigured.
Please let us know if this is on the roadmap, or if additional details are needed to help scope the request.