FortiGate Administration Guide - FirewallShop.com

Log&Report
Alert Email
Alert Email
Configuring Alert Email
The Alert Email feature enables the FortiGate unit to monitor logs for log
messages, notifying by email of a specific activity or event logged. For example, if
you require notification about administrator(s) logging in and out, you can
configure an alert email that is sent whenever an administrator(s) logs in and out.
This feature sends out an alert email based on the severity level logged as well.
When configuring alert email, you must configure at least one DNS server. The
FortiGate unit uses the SMTP server name to connect to the mail server, and
must look up this name on your DNS server.
To configure alert email
1 Go to Log&Report > Log Config > Alert E-mail.
2 Set the following options and select Apply.
SMTP Server
Email from
Email To
Authentication
Enable
SMTP user
Password
The name/address of the SMTP email server.
The SMTP user name.
Enter up to three email recipients for the alert email message.
Select the Authentication Enable check box to enable SMTP
authentication.
Enter the user name for logging on to the SMTP server to send alert
email messages. You only need to do this if you have enabled the SMTP
authentication.
Enter the password for logging on to the SMTP server to send alert
email. You only need to do this if you selected SMTP authentication.
3 Select Test Connectivity to receive a test email message to the email account you
configured in the above step.
4 Select Send alert email for the following if you require sending an email based on
one or all of the following:
Interval Time
Intrusion detected
Virus detected
Web access
blocked
HA status changes
Violation traffic
detected
Firewall authentication
device
SSL VPN login failure
Administrator
login/logout
Enter the number of minutes before an alert email is sent to the
recipient.
Select if you require an alert email message based on intrusion
detection.
Select if you require an alert email message based on virus
detection.
Select if you require an alert email message based on blocked
web sites that were accessed.
Select if you require an alert email message based on HA
status changes.
Select if you require an alert email message based on violated
traffic the FortiGate unit detects.
Select if you require an alert email message based on firewall
authentication.
Select if you require an alert email message based on any SSL
VPN logins that failed.
Select if you require an alert email message based on whether
the administrator(s) logs in and logs out.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 493