Just a quick question, one of my policies on my PA5020 is a "Deny_Any" policy whereby if no application matches the policy base then it gets denied. The only time I see this is when I view the monitor | logs | traffic.
Is there any way I could get an email sent to me when the DENY policy is matched?
Thanks in advance
This is actually a pretty easy thing to do with the right Log Forwarding policy in place. That would look something like below;
Then you would want to setup an Email Server Profile to use as the Forward Method which is very easy to do. Lastly you would want the actual DENY policy that you are using to specify the new Log Forwarding profile you just created within the policies Log Setting actions when configuring this through the GUI.
If you need any additional help setting any of that up, just let us know.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!