topic FDM email alert in Network Security

FDM email alert

SeokGeunChoi73564 — Thu, 12 Jan 2023 04:58:34 GMT

Hi, I'm using FTD 7.0.1 on FPR2110 with FDM.

I want to send email to me when happend <admin login failed on FDM GUI / Specific action detected etc... >.

Can FDM send me a warning mail? Is this feature not supported?

Re: FDM email alert

Mark Elsen — Thu, 12 Jan 2023 07:41:29 GMT

- Have look at to "Alerts" section in the FDM GUI .Once an SMTP server is configured, you can then create alert policies to specify the events that should trigger an email alert ,check if any alert policy feature(s) is available according to your needs ,

Re: FDM email alert

balaji.bandi — Thu, 12 Jan 2023 07:59:01 GMT

As of when i tested 6.X version did not see or find that feature to be honest. then we moved to FMC most time.

Looking at high level FDM has limited features - check 7.2 may be added (high level did not find myself)

https://www.cisco.com/c/en/us/td/docs/security/firepower/720/fdm/fptd-fdm-config-guide-720/fptd-fdm-mgmt.html?bookSearch=true#concept_AD4674983B434D47B6692AC29C2D1A4C

Re: FDM email alert

SeokGeunChoi73564 — Thu, 12 Jan 2023 08:27:19 GMT

Hi marce1000.

Unfortunately, I can't find "Alerts" Section in the FDM GUI.

where can I find alerts section?

Thanks.

Re: FDM email alert

Rob Ingram — Thu, 12 Jan 2023 08:39:19 GMT

@SeokGeunChoi73564 unfortunately there isn't an option to send an email from FDM (as of the latest version 7.3).

You are able to setup syslog on FDM, so perhaps you could send logs to the syslog server, which could then send an email.