User Defined Alerts - CPUG: The Check Point User Group

CPUG

The Check Point User Group

A Resource For The Check Point Community. Fast. Useful. Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.

#1 (permalink)

2005-08-13

roadrunner roadrunner is offline

Senior Member

Join Date: 2005-08-12

Posts: 162

Rep Power: 4

roadrunner has an average reputation (10+)

User Defined Alerts

User Defined Alerts
The three main steps are:

1. Write a program in any language that will process one line of input from stdin.
2. Set the program up in Policy->Properties, Logging and Alerting tab in the "User Defined" textbox
3. Set up rules with "User Defined" in the track column and re-install the security policy.
You may write a program in any language, either compiled or a shell scripting language. The line you will process will be of the following format (or similiar)

17:13:45 reject kyle

-- GuyR - 08 Jan 2004

FAQForm
FAQs.Class: LoggingAndAlertingFAQs
FAQs.OS:
FAQs.Version:

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are Off [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

All times are GMT -7. The time now is 04:27.