Firewall Events as Report

SubaMuthuram — Fri, 24 Dec 2021 09:21:47 GMT

Hi All,

Is there a way where, I can generate report of firewall events, Like login events from system logs, As daily basis. And I will share through email.

Re: Firewall Events as Report

PavelK — Fri, 24 Dec 2021 14:02:10 GMT

Thank you for the post @SubaMuthuram

All the reports in Firewall/Panorama are supporting only Traffic, Threat,... related events. I could not find any way to run a report for system logs, however if you are only interested in login events, then potentially one of the workaround could be enable under log setting in: Device > Log Settings > System, then use for example this filter: ( subtype eq auth ). The disadvantage of this, you will get an email for every login attempt.

Another alternative would be to let all System logs forward to 3rd party monitoring system / SIEM and run report from there against system logs.

topic Re: Firewall Events as Report in General Topics

Firewall Events as Report

Re: Firewall Events as Report

Re: Firewall Events as Report