@RJorgensen I would upgrade to the newest firmware version and retry: https://community.tp-link.com/en/business/forum/topic/255644

Can someone explain to me when I enable IPS... It shows info in the "unarchived" list. Does it auto block it? Or does it sit there and wait for a response? It seems like it's put it in quarantine...

@DREEMus Connection to gateway is lost... do you mean it shows disconnected in the controller? Or the VM physically disconnects from the network?

NVM... when I clicked on the line item (NOT check the box)... then it showed the data. Please disregard.

This has stopped the DHCP Spam alerts. BUT this did not happen to my recently upgraded Linux L3 controller. This did happen to another OC200 site that I have. That I had to change.

Controller: OC200 5.12.8 How would I know what to do with these messages... IF I can't see the IP addresses of the IPS interaction? I don't see IP Addresses? No source location and or Internal IP...