How to trigger a message when a particular DENY rule was hit?

[rkra]

Hello,

is it possible to trigger a message (whatever), when user hit a deny rule?

Roman

[pankaku]

You can configure a log forwarding profile and in that you can configure to send the alert to email,syslog,panorama for traffic logs. Call that profile into the security policy.

[glastra1]

To the administrator use a log forwarding profile in the security policy (SNMP, email, syslog).

To the end user enable the application block page (just for web-based applications) 

regards,

Gerardo.