Skip to main content
ZeroInterrupt
ZeroInterrupt
New Member
July 19, 2018
Question

Email alert on FTP session initiation

  • July 19, 2018
  • 1 reply
  • 2336 views

Anyone have any luck creating an event handler to trigger when an FTP session is initiated from an internal interface heading outbound and triggering an email?  I tried a DLP sensor, but it will not work here as most of the FTP transfers are initiated on port 21 but swap to 990 (tls).  

    1 reply

    brazz_FTNT
    Staff
    brazz_FTNT
    Staff
    July 23, 2018

    Hey, 

     

    Let's see on couple of your raw log entries for the event ? Can you paste it here ? 

    Also please run below command:

    get system status 

    Thanks 

    Terms & ConditionsAccessibility statement