topic Re: Sending alerts from Panorama via email in Prisma Access Discussions

Sending alerts from Panorama via email

TomaszLubas — Wed, 15 Sep 2021 13:51:16 GMT

Hello, we have configured panorama 10.0.5 to send filtered system logs to email and it works but only for logs generated on panorama.

Log filter shows also logs from managed firewalls but thoose logs are not sended and i don't know why.

Did anybody had succed sending system logs collected on panorama via email eg. admin login events ?

regards,

Tomek

Re: Sending alerts from Panorama via email

LAYER_8 — Wed, 15 Sep 2021 19:53:18 GMT

In your panorama tab you should be able to configure an email profile, for mine I am using smtp.gmail.com and have a bogus *****PRA@gmail.com email address that the alerts are sent from.

It sounds like you configured system alerts for just the panorama, you will want the same profile on the NGFWs. I suppose this would be a good time to ask as this may change the answer, are you log forwarding from the NGFWs to your PRA?

Re: Sending alerts from Panorama via email

TomaszLubas — Thu, 16 Sep 2021 06:20:35 GMT

Thank you for your answer. Problem solved. We configured it in wrong place. Log settings are related only to panorama although filter logs shows data from palos also.

After configuration log collector forwarding in collector groups everything works as intended.

regards,

Tomek

Re: Sending alerts from Panorama via email

LAYER_8 — Thu, 16 Sep 2021 12:09:14 GMT

Most excellent! Cheers