Generate an e-mail alert from a DENY policy

[JulianH]

Hi

Just a quick question, one of my policies on my PA5020 is a "Deny_Any" policy whereby if no application matches the policy base then it gets denied. The only time I see this is when I view the monitor | logs | traffic.

Is there any way I could get an email sent to me when the DENY policy is matched?

Thanks in advance

Julian

[BPry]

@JulianH,

This is actually a pretty easy thing to do with the right Log Forwarding policy in place. That would look something like below;

 

Then you would want to setup an Email Server Profile to use as the Forward Method which is very easy to do. Lastly you would want the actual DENY policy that you are using to specify the new Log Forwarding profile you just created within the policies Log Setting actions when configuring this through the GUI. 

If you need any additional help setting any of that up, just let us know. 

[TranceforLife]

Your email box will be quite full ))

[JulianH]

Thanks for this - I'll give it a go and feedback.