topic Re: block-url threat level in General Topics

block-url threat level

oshcomp — Tue, 15 Jan 2013 20:40:02 GMT

I am trying to set up notification for blocked urls. I can see block-url syslog messages when I set log forwarding to log severity level informational. Is there a way to modify the threat level for blocked urls? I would like to use a higher threat level as an indication of when to send an email alert.

Thanks.

Re: block-url threat level

dyang — Tue, 15 Jan 2013 21:21:29 GMT

You cannot modify the severity level of any of the syslog messages, as those are pre-set.

Re: block-url threat level

mikand — Tue, 15 Jan 2013 21:43:01 GMT

However you can file this as a feature request through your local sales engineer.

I think it could be handy to get a list of various types of messages where you could select "default" or manually override into one of the severity levels available.

This way one could "reclassify" so block-url messages are sent as "low" instead of "informational" (or whatever the names are for the severities).