Alert Config

[usvi]

Folks,

I would like to configure the PAN firewall to send an email alert whenever the firewall config is changed or edited . Any ideas on how to accomplish this ?

Thanks

[kadak · Accepted solution]

Hello usvi,

Any configuration changes done on the firewall are viewed under Monitor > Logs > Configuration with filter as (cmd eq edit)

1.) Configure an email server profile under Device > Server Profiles > Email.

The gateway ip address is the SMTP server used to send an email

2.) Set that email server profile for config changes under Device > Log settings > Config

Hope that helps!

Thanks and regards,

Kunal Adak

[hvcomputech]

Isn't this missing a step? Where is the "cmd eq edit" or the "cmd eq commit" (for submissions) defined in this configuration?

[tasonibare]

Hello hvcomputech,

cmd eq edit | cmd eq commit are filters you can use while viewing the configuration logs.

For the email alerts, however, there is no option to filter what configuration sub-sections are sent out... so you are correct, but those are not needed for the email alert configuration.

fyi, other cmd filter options include:

cmd eq set

cmd eq delete

cmd eq move

cmd eq rename

cmd eq clone

cmd eq add

cmd eq request

Regards,

tasonibare