Email Alert when enable or disable existing policy

[EvanRaci]

Hi ,

We’ve Palo Alto Firewalls managed by Panorama. We want to configure email alert from Palo Alto but we don’t want to receive every configuration logs. We only want to receive notification by email when we enable or disable existing firewall rules.

It is possible to setup a custom email alert for this either from Panorama or Palo Alto?

Thank you and please guide me.

[EvanRaci]

I think, I can create filter based on Attribute "before change" and "after change" . But want to know any other idea better than this?

[TomYoung]

Hi @EvanRaci ,

You should be able to use the same filters you would under the Monitor tab.

The filter in the pic should work, and all you have to do is add your email profile.  The View Filtered Logs tab should confirm it is working.

Thanks,

Tom