Alert Notification in Panorama

[tiwara]

Hello,

Can you please let me know hwo to confirured the alert in panorama for Vulnerability Protection, Antivirus or Antispyware .

Need it very urgent . Please help.

Thanks

Amber

[HULK]

Hello Amber,

Please follow below mentioned KB doc for the same.

How to Setup Email Alerts

Email alerts,.

How to Configure Email Alerts for System Logs?

Thanks

[tiwara]

Need the alert setting for Vulnerability Protection, Antivirus or Antispyware .

[pulukas]

There is not a direct way to email from a profile.

You can do this indirectly by adding email to the security policy.

1-Create the email profile with the address you want under:

Device > Server Profiles > Email

2-Create a log forwarding profile and attach this email profile to it.

Objects > Log Forwarding

3-Add this log forwarding profile to the security rule where your vulnerabilty, AV and Spyware profiles are applied that you want the alert.

[tiwara]

We are pushing all the security rules from Panorama to the firewalls and in the policy its log forwarding is already setted to panorama .

Do we need to create a new log forwarding profile. ??

[jburugupalli]

Hello Amber,

Only one log forwarding profile can be assigned to a security policy at any given point of time, but different security policies can have different log forwarding profile assigned.

So to get email alerts for vulnerability, AV and Spyware for any severity , you can create email profile and attach email profile to log type " Threat"  as suggested by Steven Puluka

Please let us know if you have any questions.

Regards,

Jahnavi.

[tiwara]

Hello Janhavi ,

Thanks for the details .,we have created the real time alerts for vulnerability, AV and Spyware for any severity .

Working fine and we are getting the alert once any High or Critical alert happened.

Thanks

Amber