Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ZeroInterrupt
New Contributor

Email alert on FTP session initiation

Anyone have any luck creating an event handler to trigger when an FTP session is initiated from an internal interface heading outbound and triggering an email?  I tried a DLP sensor, but it will not work here as most of the FTP transfers are initiated on port 21 but swap to 990 (tls).  

1 REPLY 1
brazz_FTNT
Staff
Staff

Hey, 

 

Let's see on couple of your raw log entries for the event ? Can you paste it here ? 

Also please run below command:

get system status 

Thanks 

Labels
Top Kudoed Authors