topic Re: FMC send alert for login in Network Security

FMC send alert for login

kostasthedelegate — Wed, 23 Jun 2021 12:41:41 GMT

Hello,

I would like to ask if there is a way for the FMC to send an email when someone logs in and his IP

Thanks and regards,

Konstantinos

Re: FMC send alert for login

balaji.bandi — Wed, 23 Jun 2021 12:46:14 GMT

Look at traps and email alerts :

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Configuring_External_Alerting.html#ID-2197-00000096

Re: FMC send alert for login

kostasthedelegate — Mon, 28 Jun 2021 08:13:21 GMT

Hello,

Thanks for the info.

I do not see in that page sth for login.

Re: FMC send alert for login

balaji.bandi — Mon, 28 Jun 2021 08:59:39 GMT

I was able to setup syslog alerts and my syslog generate event alerts when use login, i did email alerts only critical once.

Re: FMC send alert for login

kostasthedelegate — Mon, 28 Jun 2021 12:03:02 GMT

The email alerts were configured on the syslog?

Re: FMC send alert for login

balaji.bandi — Mon, 28 Jun 2021 12:57:05 GMT

FMC Sends the Login information to syslog server, SYSLOG server able to send you an email alertrs, depends on what syslog server you using. or you can do customer script to match Login information send email.