Hi @RichardHum
I would recomment the option with the script that queries the firewalls API (mainly because I did it already this way with a check on the installed content updates). Do you automatically install the content/antivirus/wildfire updates on the firewall? If yes, then ypur script could periodically query the firewalls and generate an alert for example when the content updates are older than 8 days or when the antivirus updates are older than 2 days. If you are using panorama the query would be even easier aso you do not have to connect to every firewall to see the installed versions.
With a log forwarding it would probably work also. When you forward the system logs they will see the logs of the last installed updates and could then generate an alert when there is no such log entry during the last days.
So as I wrote, I would prefer the API but you are right, the easiest way for you probably is the logforwarding.
... View more
