Security rule changes can be viewed at Monitor > Logs > Configuration. The filter, (cmd eq edit), is used to view the changes, as shown below:
This document describes the steps to configure email notifications on security policy changes (including add/edit/delete operations).
Thanks for the post. I have tried your instructions and it works very well, except I get emails for every single operation. Is there a way to do the same but limit the emails to commits only?
( cmd eq commit )
I haven't tried this but hvcomputech's experience is exactly what my first reaction was. Wouldn't this send an email for every operation?
Thank you for the post!
I think this tittle is not precise, because if you configure this, you are gonna receive an e-mail every config log, not just policy config logs.
Is there a way to restrict what type of config log is sent? Or no?