topic Re: email notification in General Topics

email notification

infotech — Tue, 29 Jul 2014 19:23:58 GMT

Is it possible to set up a notification by email to let you know when one and only one vpn tunnel goes down? I also want to be able to turn it off once I am done troubleshooting

Re: email notification

hshah — Tue, 29 Jul 2014 19:26:27 GMT

Hello Infotech,

I do not think its possible to do from PANW.

However, PANW forwards such kind of logs to syslog server, you can definitely configure syslog server to send such kind of trigger emails.

Regards,

Hardik Shah

Re: email notification

infotech — Tue, 29 Jul 2014 19:38:37 GMT

Okay that makes sense

Re: email notification

hshah — Tue, 29 Jul 2014 19:40:15 GMT

Hello Infotech,

Check what system log Firewall generates for VPN tunnel flap.

Configure actuall syslog server for email alert for that log.

Let me know if you have additional queries.

Regards,

Hardik Shah

Re: email notification

bat — Tue, 29 Jul 2014 19:43:30 GMT

Hi infotech

You can configure email notification based on the severity of the log. How to Configure Email Alerts for System Logs?

Suppose if VPN down event generates a log entry of severity HIGH you can get that in your email based on the above setup but the caveat being you will get other HIGH severity log events as well.

There is no mechanism to send email only for VPN down event.

Hope it helps!

Re: email notification

infotech — Tue, 29 Jul 2014 19:52:53 GMT

I will check that out thanks

Re: email notification

HULK — Tue, 29 Jul 2014 20:13:19 GMT

Hello Infotech,

I hope this is the exact info, you are looking for: How To Alert on IPSec Tunnel Down?

Thanks

Re: email notification

infotech — Tue, 29 Jul 2014 21:15:22 GMT

That will work. but it will alert for everything within a certain range of severity not just for a specific tunnel right?

Re: email notification

HULK — Tue, 29 Jul 2014 21:21:22 GMT

Yes, you are correct.

PAN does not have an ability to send email alerts only for VPN down messages, but it will send email alerts for all SYSTEM logs with critical/High severity.

NOTE: If you think, there should be a way to achieve this, it's best you reach out to your SE or sales contact. If there are features we currently don't have but you would like to see added they can create a feature request for you.

Hope this helps.

Thanks