Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Can SRX notify to administrator in the wake of the match with the security policy using e-mail or snmp-trap?

$
0
0

Hi,

 

For generating traps using the event-options, please go through the following link :-

https://kb.juniper.net/InfoCenter/index?page=content&id=KB28307&actp=search

 

The event options have to match an event when the session hits the policy which can be "RT_FLOW" however the policy name would be in the middle of the syslog which is generated.

 

We also need the following two conditions :-

  1. The RT_FLOW messages should be logged to the messages file using event mode (This can cause RE high CPU if a lot of hits are there on the policy).
  2. Apply log -> session init to the security policy.

Regards,

Sahil Sharma

---------------------------------------------------

Please mark my solution as accepted if it helped, Kudos are appreciated as well.


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>