| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Depends on the suspicious behavior. If you'd like an email sent out when a specific rule is matched, then you can do this with the userdefined alerts (Global Properties -> Logs + Alerts -> Alert commands; then set the track option of the rule to the specific userdefined alert). If you'd like to be notified when you see 100,000 connections to the same IP in 30 seconds then you should look at Eventia Analyzer. |
![]() |
| Thread Tools | |
| Display Modes | |
| |