topic Re: How to notice network admin if someone tries to browse certain websites? in General Topics

How to notice network admin if someone tries to browse certain websites?

MelLi — Thu, 05 Mar 2015 02:51:28 GMT

Hi Guys,

Our customer uses Palo Alto in an education institute. They want to find out if Palo Alto firewall provides features such that if someone try to access certain website, for example, adult site, suicide site, the firewall will automatically send email to alert the network admin.

So far, I haven't found any document about this. But what I can think of, is to configure url filtering profile with action continue, then the admin can filter on the url filtering logs to find out these behaviors.

Is there a specific feature we can use to achieve the above requirements, sending automatic alert message to admin via email or other ways?

Thanks.

Cheers,

Mel

Re: How to notice network admin if someone tries to browse certain websites?

hshah — Thu, 05 Mar 2015 03:29:10 GMT

Hi Mel,

Either you can forward all the URL filtering logs or none. As of now selective forwarding is not possible. There is a open feature request for the same.

Regards,

Hardik Shah

Re: How to notice network admin if someone tries to browse certain websites?

MelLi — Thu, 05 Mar 2015 03:34:30 GMT

Hi Hardik,

Thanks for your reply. May I know the feature request number?

Thank you.

Cheers,

Mel

Re: How to notice network admin if someone tries to browse certain websites?

HULK — Thu, 05 Mar 2015 03:46:04 GMT

Hello Mel,

Please find below mentioned feature request details:

Description: Granular log forwarding

FR ID: 1263

Email Alert for Custom or Specific Threat ID or Data Pattern (URL logs)

FR ID: 1477

The best avenue for information on this type of issue will be your PA sales team. They can get you the roadmap for the feature and add you to any pending feature request.

Thanks

Re: How to notice network admin if someone tries to browse certain websites?

MelLi — Thu, 05 Mar 2015 03:48:50 GMT

Hi Hulk,

Thanks so much for the answer.

Cheers,

Mel

Re: How to notice network admin if someone tries to browse certain websites?

HULK — Thu, 05 Mar 2015 03:49:57 GMT

You are welcome Mel