Skip to main content
rsondal
Staff
Staff
April 26, 2023

Technical Tip: How to receive an alert email when SSL VPN user login successfully

  • April 26, 2023
  • 0 replies
  • 13359 views
Description This article describes how to receive an alert email when SSL VPN user login successfully.
Scope FortiGate.
Solution
  1. Create an Automation Stitch for this.
  2. Go to Security Fabric -> Automation -> Create New.

 

1st.png

 

  1. Select Add Trigger -> Create -> FortiOS event log -> Event and select the correct SSL VPN Tunnel Up entry.

 

2nd.png

 

3rd.png

 

4th.png

 

  1. Select Add Action-> Create -> Select Email and configure as preferred.

 

5th.png

 

auto action.PNG

 

Example configuration in the CLI: 

 

config system automation-trigger
    edit "test"
        set event-type event-log
        set logid 39424
    next
end

config system automation-action
    edit "test_email"
        set action-type email
        set email-to "test@fortinet.com"
        set email-subject "Alert-VPN login successful"
    next
end

config system automation-stitch
    edit "sslvpn login successful"
        set trigger "test"
            config actions
                edit 1
                    set action "test_email"
                    set required enable
                next
            end
    next
end

 

  1. Try to log in to SSL VPN and it will be possible to see the logs under System Events -> VPN events.

 

7th.png

 

8th.png

 

It is possible alternatively to test the automation stitch using the following command:

 

diagnose automation test <name>


To receive email alerts using automation stitch for a specific user, use the following field filter. 

auto SSL VPN stitch.PNG

 

Note:
If the automation stitch is triggered but fails to receive an email alert, refer to Troubleshooting Tip: Email alert or contact Fortinet Support for assistance.
 
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT