Event handler to notify by email when for instance a new firewall rule has been added

Forum|Forum|5 years ago
December 23, 2020
1 reply
1864 views

Im working on creating event handlers on FortiManager-200F

v6.4.4 GA build2253. I have successfully created an event handler that notifies by email when any configuration has been changed in the firewalls connected to Fortimanager , however the alert does not give full details it only says configuration changed . My question now is it possible to create an event handler which will give exact information of configuration done for instance get an alert saying firewall rule has been added or deleted Would be grateful if anyone can assist on how i can go about setting such an event handler

Fortimanager

mrafat

Staff

Hi Sammy,
The Event handlers are similar to Regex, they simply filter out received logs from Fortigate by looking for a certain condition and when that happen, it notify you whether via Email, syslog..etc
I believe there is no logs in FGT, that tells what changes were made in details and hence to create an event handler on something that FGT itself doesn't trigger it in it's own Logs won't be applicable

Sign up

Login with SSO

Login to the community

Login with SSO