How to notice network admin if someone tries to browse certain websites?

[MelLi]

Hi Guys,

Our customer uses Palo Alto in an education institute. They want to find out if Palo Alto firewall provides features such that if someone try to access certain website, for example, adult site, suicide site, the firewall will automatically send email to alert the network admin.

So far, I haven't found any document about this. But what I can think of, is to configure url filtering profile with action continue, then the admin can filter on the url filtering logs to find out these behaviors.

Is there a specific feature we can use to achieve the above requirements, sending automatic alert message to admin via email or other ways?

Thanks.

Cheers,

Mel

[hshah]

Hi Mel,

Either you can forward all the URL filtering logs or none. As of now selective forwarding is not possible. There is a open feature request for the same.

Regards,

Hardik Shah

[MelLi]

Hi Hardik,

Thanks for your reply. May I know the feature request number?

Thank you.

Cheers,

Mel

[HULK · Accepted solution]

Hello Mel,

Please find below mentioned feature request details:

Description: Granular log forwarding

FR ID: 1263

Email Alert for Custom or Specific Threat ID or Data Pattern (URL logs)

FR ID: 1477

The best avenue for information on this type of issue will be your PA sales team.  They can get you the roadmap for the feature and add you to any pending feature request.

Thanks

[MelLi]

Hi Hulk,

Thanks so much for the answer.

Cheers,

Mel

[HULK]

You are welcome Mel