Email containing detailed information when a download takes place

[Crash28]

Hi everyone,

I've read the user guide and searched around here but I'm not able to find an easy step by step guide. I'd like to setup/receive an email from our PAN whenever a download takes place. We currently receive other threat alert emails etc. but not these. I'm thinking it has something to do with Data Logs as the Dashboard provides a visual of files downloaded in addition to other content but not 100% sure.

Ideally, if a user performs an inbound download from the internet I'd like to receive an email with a description of what was downloaded and from where. Any ideas anyone?

Thanks,

Mark

[jwolach]

You can do the following but, you will not be able to have the FW email you the file name that was downloaded.

1. Create a Custom App-ID that looks for http-req-uri-path for different file extensions that uses HTTP GET method

2. Create a Security Policy that matches your new Custom App-ID

3. Add to the Security Policy a Log Forwarding Profile that sends an Email based on Traffic log entries

I hope this helps.

Thanks,

Jeff