topic Re: Critical System Alerts on a PA-220 in General Topics

Critical System Alerts on a PA-220

vanglee — Thu, 01 Oct 2020 15:08:16 GMT

Hello,

We recently implemented a secondary line on our network and were testing the failover process. Everything worked well, however, we realized that we were not alerted of the primary circuit going down or recovering. It was confirmed when looking through the system log that the failure and recovery were reported, yet no emails was sent out. I have confirmed under Server Profiles that we have our primary email set to receive critical alerts. None of those configurations have changed from what I know.

Are there other recommendations to the process of reporting test critical system alerts?

Re: Critical System Alerts on a PA-220

Rene_Boehme — Thu, 01 Oct 2020 17:49:11 GMT

Hi,

can you please post a screenshot of your setting under Device > Log Settings?

Can you check this article below to see if general mail function is working?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClUiCAK

Re: Critical System Alerts on a PA-220

OtakarKlier — Thu, 01 Oct 2020 21:59:59 GMT

Hello,

Also make sure that the SMTP server is accessible from either ISP.

Regards,

Re: Critical System Alerts on a PA-220

vanglee — Fri, 02 Oct 2020 18:56:55 GMT

Hi there,

Here's a screenshot of log setting setup. I reviewed the link provided and have confirmed we're able to get test emails.

Re: Critical System Alerts on a PA-220

BPry — Sat, 03 Oct 2020 04:03:41 GMT

@vanglee,

If you look at the ms.log file can you see anything saying that it can't send to one of the email addresses that you have specified?

less mp-log ms.log

Re: Critical System Alerts on a PA-220

vanglee — Tue, 06 Oct 2020 18:19:24 GMT

Thanks for the responses so far. I did a some more looking today and noticed that under Devices>Log Settings>Alarm Settings "Enable Alarms" and "Enable Web Alarm Notifications" were not enabled. I went ahead and enabled and committed the changes.