topic Re: PBF e-mail notification in General Topics

PBF e-mail notification

dwoolley — Tue, 17 Apr 2012 19:10:43 GMT

Hello,

Does anyone know if there's a way to have a notification e-mail sent when PBF kicks in? We had a hiccup on our Internet circuit and PBF worked flawlessy... so well though that I wasn't really aware of the circuit issue until the next day when I was troubleshooting something else related to the hiccup. There are probably a few different ways that I can monitor and alert but I was just wondering if having the PA firewall send a notification e-mail is one of them.

Thanks in advance!

-Dave

Re: PBF e-mail notification

zarina — Wed, 18 Apr 2012 17:57:03 GMT

You can forward the logs to a syslog server and then parse it for the pbf rule and run a script then sends you an email when it sees the pbf rule.

We cannot achieve this on the PAN itself.

Re: PBF e-mail notification

dwoolley — Thu, 19 Apr 2012 04:45:40 GMT

Thanks for the reply. Ok... I may give that a try.

-Dave

Re: PBF e-mail notification

sgonzalez — Thu, 15 Oct 2015 15:12:41 GMT

Has there been any updates to allow this type of notification directly from the firewall itself rather than use an external log parser? This has come up a number of time recently for us and it would be a great addition to have a "notify" option/feature on pbf rule triggers.

Thanks,

Steve

Re: PBF e-mail notification

OtakarKlier — Fri, 16 Oct 2015 22:19:55 GMT

While you may not be able to set an email alert on the policy when its hit, how about a system parameter? If the interface goes down for example.

I used to do this for HA events.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Email-Alerts-for-System-Logs/ta-p/60279

Just a thought.