Features Inquiry

[HartkentlyNua]

Hello Guys,

I would like to know if there is an alert feature in PAN where it will alert (via Email, Syslog,snmp or other Log forwarding) the administrators whenever someone is trying to login in the device.

also, is there a plan in adding a Configuration Forwarding to PAN? basically PAN will just send the latest config to a FTP server or other file transfer.

Thanks in advance.

-hartkently

[HULK]

Hello,

The firewall does not have an option to back up the config until and unless you use xmli api. If you have a panorama managing your device you can schedule a config export by navigating to Panorama-Schedule Config export--use ftp/scp.

Related notes:

automatic config backup option

Re: Saving and Exporting Configs

schedule

As per my knowledge, the XML-API backup works fantastically.

How to use the XML API to backup your firewall configuration

Hope this helps.

Thanks

[HULK · Accepted solution]

Few related information for alert notification to Email,syslog , snmp or other Log forwarding:

Email alerts,.

How to Configure Email Alerts for System Logs?

How to Setup Email Alerts

Example:

(A) The login information under SYSTEM logs will be "informational"

(B) Create a server profile for SYSLOG and email notification.

(C)  Edit the "infomational" log settings under System>, add the configured SYSLOG server and email profile.

(D)  Set up a log forwarding profile under Object > Log forwarding

Hope this helps.

Thanks

[HartkentlyNua]

Thank you for this very helpful information. but this isn't exactly what we are trying to figure out.

Correct me if I'm wrong but from what i understand on your comment, the traffic must first go through the policy.

what if the traffic is internal and it didn't pass through the sec policies.

thanks..

[HULK]

Hello Sir,

The above mentioned information is just an example. For SYSTEM logs, it does not require to have a security policy (assuming that the SYSLOG server is connected through management interface). Hence, you will get the login information whenever someone will try to login.

Thanks

[HartkentlyNua]

Thank you for clearing that out. I will test this personally.

I appreciate your help.

-hartkently