ASM: how to send email when violation occurs

HA,

 

There's a few things to do and I've not done this specifically for ASM events but you need to follow the following solution articles to create an SNMP Trap and then send an email based on this trap:

 

Configuring the BIG-IP ASM system to send SNMP traps to communicate a blocked request and request violation

 

Creating custom SNMP traps

 

Configuring alerts to send email notifications

 

Hope this helps, report back if not.

 

N

 

Hi Nathan,

 

First, many thanks for your help. I'll in my lab environment and keep you inform.

 

Regards,

 

HA

 

Hi ,

 

You can configure the SMTP settings for ASM from tmsh.

 

1. Create SMTP server - Follow the link- Click Here

    

2. Create Categories/vioalation list to notify. Follow the link- Click here

    

Please note that this method will utilize F5 resources more because everytime it mateched the rule for violations. I can suggest you to configure syslog server and get the email notification configured from the syslog server which no where affect F5 performance.

 

-Jinshu