topic Email notifications for a hit ACL in Network Security

Email notifications for a hit ACL

HQuest — Fri, 21 Feb 2020 17:37:36 GMT

Can I have FMC to drop an email every time one particular ACL is hit? I know I can generate a SNMP trap or a syslog event, but is email notification an option somehow?

Re: Email notifications for a hit ACL

Francesco Molino — Thu, 24 Oct 2019 03:13:21 GMT

Hi

Quite sure you can't do that using FMC. I mean never had such request but in any notification menu there's no such option.

However, if you using api, you can see hits and based on this you can send an email. If it's a rule getting lot of hits, it's going to be hard to catch it and/or you're going to receive lot of emails

Re: Email notifications for a hit ACL

HQuest — Sat, 09 Nov 2019 22:39:22 GMT

That's for a rule that rarely is to be triggered, yet has a very high impact if so. I understand about the volume of notifications, and I second no such scenario should be expected for something with a likelihood of being triggered once every second (or minute).

Seems I'll continue to rely on third party solutions, then. Thanks anyway.