View Single Post
  #2 (permalink)  
Old 2008-01-27
dsb.nepo dsb.nepo is offline
Senior Member
 
Join Date: 2006-04-30
Location: Europe, Germany
Posts: 143
Rep Power: 3
dsb.nepo has an average reputation (10+)
Default Re: Generate mail alert for "illegal" access

It is possible if you crate a group for all SecuRemote users, them move all the Remote access rules at the top of the rulebase.
Create the a cleanup rule for the Remote access after the Remote access permit rules

for example:
Code:
source       | destination |     VPN     | service | action | track 
-------------|-------------|-------------|---------|------------------
SR-Users@any | SRV-GRP1    |RemoteAccess | http    | accept | log
SR-Users@any |   any       |RemoteAccess | any     | reject | mail
Before implementing this take a look at your logfiles, look at the VPN log section with a filter like this
'column USER not empty' to get an impression how many mails you will find in your mailbox.
Reply With Quote