topic Re: Features Inquiry in General Topics

Features Inquiry

HartkentlyNua — Fri, 21 Feb 2014 02:53:25 GMT

Hello Guys,

I would like to know if there is an alert feature in PAN where it will alert (via Email, Syslog,snmp or other Log forwarding) the administrators whenever someone is trying to login in the device.

also, is there a plan in adding a Configuration Forwarding to PAN? basically PAN will just send the latest config to a FTP server or other file transfer.

Thanks in advance.

-hartkently

Re: Features Inquiry

HULK — Fri, 21 Feb 2014 05:33:28 GMT

Hello,

The firewall does not have an option to back up the config until and unless you use xmli api. If you have a panorama managing your device you can schedule a config export by navigating to Panorama-Schedule Config export--use ftp/scp.

Related notes:

automatic config backup option

Re: Saving and Exporting Configs

schedule

As per my knowledge, the XML-API backup works fantastically.

How to use the XML API to backup your firewall configuration

Hope this helps.

Thanks

Re: Features Inquiry

HULK — Fri, 21 Feb 2014 05:45:06 GMT

Few related information for alert notification to Email,syslog , snmp or other Log forwarding:

Email alerts,.

How to Configure Email Alerts for System Logs?

How to Setup Email Alerts

Example:

(A) The login information under SYSTEM logs will be "informational"

(B) Create a server profile for SYSLOG and email notification.

(D) Set up a log forwarding profile under Object > Log forwarding

Hope this helps.

Thanks

Re: Features Inquiry

HartkentlyNua — Fri, 21 Feb 2014 06:03:22 GMT

Thank you for this very helpful information. but this isn't exactly what we are trying to figure out.

Correct me if I'm wrong but from what i understand on your comment, the traffic must first go through the policy.

what if the traffic is internal and it didn't pass through the sec policies.

thanks..

Re: Features Inquiry

HULK — Fri, 21 Feb 2014 06:17:29 GMT

Hello Sir,

The above mentioned information is just an example. For SYSTEM logs, it does not require to have a security policy (assuming that the SYSLOG server is connected through management interface). Hence, you will get the login information whenever someone will try to login.

Thanks

Re: Features Inquiry

HartkentlyNua — Fri, 21 Feb 2014 06:26:01 GMT

Thank you for clearing that out. I will test this personally.

I appreciate your help.

-hartkently