Getting an alert when too many outbound smtp connections occur

gafrol — Fri, 16 Sep 2011 13:50:50 GMT

Dear all, I am looking for a solution with the PAN Firewall (4.0.5) to get an alert when a single sender email adress (smtp) is sending x amount of emails during a defined and configurable amount of time. Any Ideas how to implement that ? thanks Roland

Re: Getting an alert when too many outbound smtp connections occur

pkruse — Fri, 16 Sep 2011 21:54:02 GMT

We don't have a feature to provide that specific function however you could create a DOS protection rule against the smtp port and apply it to an ip address with a threshold trigger.

Unfortunately we don't have a built in function to alert on an application based on threshold, I would recommend you contact your local SE and have them create a feature request.

~Phil

topic Getting an alert when too many outbound smtp connections occur in General Topics

Getting an alert when too many outbound smtp connections occur

Re: Getting an alert when too many outbound smtp connections occur