MAC Address in IPS/IDS alerts

Submitted by -
Status: New Idea

It would be much more helpful to have both the mac address and the ip of the local device causing the IPS alert or even better a link to the device's config. I have gotten several IPS alerts now where once I start looking into the alert, the client has dissconnected and since the ip address no longer shows up on dissconnect, I can't figure out what device caused the alert. I've found that the MAC address is in the USG logs, but I don't want to have to look through those each time I want to find out the MAC address. 

Comments
by
on ‎11-27-2018 07:54 AM

Same problem here!