Hi Sophos thank you for allowing Email Notifications for IPS , ATP and some extra system notifications in 18.
Is there any chance we can get notifications on Application Filter and Web Filter Deny's as well in the future ? I have some sites where those in charge want to know immediately when a torrent client or filter avoidance app gets picked up by the firewall . At bigger sites where they still have onsite hardware what we've done is push syslogs to graylog via syslog and then write action Filters to send notifications if something gets picked up but its a laborious process to standup software and the code to do so.
It can be throttled by src -> dest pair every x minutes to avoid too many alerts
This thread was automatically locked due to age.