Firewall rule changed alert

Author
Post
Essentials Only Full Version
Ludo
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2021/01/13 05:33:12
  • Status: offline
2021/01/13 05:45:38 (permalink)
0

Firewall rule changed alert

Hi,
 
We have multiple FortiGate instances with different VDOMs.
We have several admins working on them and would like to be notified when a rule changes on one of the VDOMs.
I didn't find anything right away, is there an easy way to do this?
 
Kind Regards,
Ludovic
#1

2 Replies Related Threads
    lobstercreed
    Platinum Member
    • Total Posts : 360
    • Scores: 43
    • Reward points: 0
    • Joined: 2018/11/28 14:57:58
    • Location: Sedalia, MO
    • Status: offline
    Re: Firewall rule changed alert 2021/01/14 08:05:53 (permalink)
    0
    I review system event logs after the fact to keep abreast of what other admins are doing and did figure out how to set an alert in FortiAnalyzer based on this, but as far as an alert from the FortiGate itself - I'm not sure.  Do you have FortiAnalyzer?
    #2
    Ludo
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/01/13 05:33:12
    • Status: offline
    Re: Firewall rule changed alert 2021/01/14 08:29:54 (permalink)
    0
    Yes, we have a FortiAnalyzer in our environment. It would be great if you could help me.

    For now, I have created a script that gets the full config every day and checks if there are any differences with the previous config.
    #3
    Jump to:
    © 2021 APG vNext Commercial Version 5.5