Setup Alert for Traffic to Specific IPs

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Setup Alert for Traffic to Specific IPs

L4 Transporter

We are trying to figure out if there is a way to have the firewall create an alert in the logs when traffic hits a specific IP range. We don't want to block access to this range of IP addresses but we want to be able to confirm if users are conversing with IPs in a specific range. Any thoughts on this would be appreciated?

Thanks in advance!

1 REPLY 1

L3 Networker

Hi,

Yes. You need to specify separate rule for the traffic pertaining to IP range.

e.g. see below rule for source range 10.0.0.0/8

rule.PNG.png

Setup email, log forwarding profile and assign it to the the relevant security rule.

logfwd.PNG.png

For detailed steps to create email, log forwarding profile refer to https://live.paloaltonetworks.com/docs/DOC-3779

Hope this helps!

  • 3277 Views
  • 1 replies
  • 1 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!