Alert When Accessing Application

[GCSS-RT]

Good morning!

I'm trying to figure out if it's possible to throw an "alert" log entry when a specific application is accessed. I know it can be done with categories, but I'd like to do the same with specific applications.

I can always filter my Traffic Monitor for that application, but sometimes it's much more convenient to set the "alert" status to "on" to monitor before denying access to an application to get a better understanding of who's accessing it and why.

Any advice?

[OtakarKlier]

Hello,

This is not done on the application itself, but rather on the security policy. So if you set the policy to log at session end, the application should show up in the logs.

Hope that helps.

[GCSS-RT]

Is this the only way? We can't make it alert to the Threat or URL Filtering log as the categories do?

[OtakarKlier · Accepted solution]

Hello,

When the security policy is set to log at session end. It will place the log into the proper area. In some cases it will be in all three, traffic, URL, Threat.

Regards,

[GCSS-RT]

Oh, got it. I didn't realize that setting could determine where log entries would show up. I learned something new today! I appreciate that.