topic Re: Alert When Accessing Application in General Topics

Alert When Accessing Application

GCSS-RT — Fri, 17 May 2019 12:05:38 GMT

Good morning!

I'm trying to figure out if it's possible to throw an "alert" log entry when a specific application is accessed. I know it can be done with categories, but I'd like to do the same with specific applications.

I can always filter my Traffic Monitor for that application, but sometimes it's much more convenient to set the "alert" status to "on" to monitor before denying access to an application to get a better understanding of who's accessing it and why.

Any advice?

Re: Alert When Accessing Application

OtakarKlier — Fri, 17 May 2019 16:03:25 GMT

Hello,

This is not done on the application itself, but rather on the security policy. So if you set the policy to log at session end, the application should show up in the logs.

Hope that helps.

Re: Alert When Accessing Application

GCSS-RT — Fri, 17 May 2019 17:21:31 GMT

Is this the only way? We can't make it alert to the Threat or URL Filtering log as the categories do?

Re: Alert When Accessing Application

OtakarKlier — Fri, 17 May 2019 18:02:43 GMT

Hello,

When the security policy is set to log at session end. It will place the log into the proper area. In some cases it will be in all three, traffic, URL, Threat.

Regards,

Re: Alert When Accessing Application

GCSS-RT — Fri, 17 May 2019 18:46:20 GMT

Oh, got it. I didn't realize that setting could determine where log entries would show up. I learned something new today! I appreciate that.