Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Email alert on FTP session initiation
Anyone have any luck creating an event handler to trigger when an FTP session is initiated from an internal interface heading outbound and triggering an email? I tried a DLP sensor, but it will not work here as most of the FTP transfers are initiated on port 21 but swap to 990 (tls).
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hey,
Let's see on couple of your raw log entries for the event ? Can you paste it here ?
Also please run below command:
get system status
Thanks