Receive an email when an HIP rules not match

Reply
vbe
L0 Member

Receive an email when an HIP rules not match

Hello,

 

I m going to enable HIP on our global protect so i m testing it and it works very well but i can t find how i can receive an email when a hip profile is not match. I have enabled the log transfer in device -> log settings. So i receive emai  even hip match or not but i can find how send eamil on hip not match only

 

Can you help me

 

Thanks

 

Vincent

L4 Transporter

Re: Receive an email when an HIP rules not match

Hi vbe,

 

In order to achieve this, what you'll need to do is created a 'not equal to' type of HIP object/profile and create a seperate deny rule for this.

 

On this new rule create a log forwarding profile and have it email you when this rule it matched.

 

hope this helps,

Ben

vbe
L0 Member

Re: Receive an email when an HIP rules not match

Thanks for your Answer,

 

Your solution works i have created a rule with neq of my hip object

 

Capture.JPG

 

but i receive a lot of email just for one global protect whitch hips not match

 

 

 

 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!