Firewall Events as Report

[SubaMuthuram]

Hi All,

Is there a way where, I can generate report of firewall events, Like login events from system logs, As daily basis. And I will share through email. 

NGFW 

[PavelK · Accepted solution]

Thank you for the post @SubaMuthuram

All the reports in Firewall/Panorama are supporting only Traffic, Threat,... related events. I could not find any way to run a report for system logs, however if you are only interested in login events, then potentially one of the workaround could be enable under log setting in: Device > Log Settings > System, then use for example this filter: ( subtype eq auth ). The disadvantage of this, you will get an email for every login attempt.

Another alternative would be to let all System logs forward to 3rd party monitoring system / SIEM and run report from there against system logs.

Kind Regards

Pavel

[SubaMuthuram]

Thanks for the reply. Pavel.