topic Re: Generate an e-mail alert from a DENY policy in General Topics

Generate an e-mail alert from a DENY policy

JulianH — Thu, 14 Sep 2017 14:20:06 GMT

Just a quick question, one of my policies on my PA5020 is a "Deny_Any" policy whereby if no application matches the policy base then it gets denied. The only time I see this is when I view the monitor | logs | traffic.

Is there any way I could get an email sent to me when the DENY policy is matched?

Thanks in advance

Julian

Re: Generate an e-mail alert from a DENY policy

BPry — Thu, 14 Sep 2017 14:45:51 GMT

@JulianH,

This is actually a pretty easy thing to do with the right Log Forwarding policy in place. That would look something like below;

Then you would want to setup an Email Server Profile to use as the Forward Method which is very easy to do. Lastly you would want the actual DENY policy that you are using to specify the new Log Forwarding profile you just created within the policies Log Setting actions when configuring this through the GUI.

If you need any additional help setting any of that up, just let us know.

Re: Generate an e-mail alert from a DENY policy

TranceforLife — Thu, 14 Sep 2017 15:28:43 GMT

Your email box will be quite full ))

Re: Generate an e-mail alert from a DENY policy

JulianH — Fri, 15 Sep 2017 07:29:07 GMT

Thanks for this - I'll give it a go and feedback.