Forum Discussion
Andre-Germany
Nimbostratus
NimbostratusNotification ASM
Hello everybody, Is there a way to be notified by email if the ASM module blocks something?
JacobCaballeroYes, under Security > Reporting > Scheduled Reports > Create New Reporting Schedule
Here you can set it to send a report ever hour with the top violations or you can choose top policies by alarmed and blocked. I do not believe you can have an email every single time you get a block. In all honesty, you probably do not want that. We have policies that block 1000 requests plus per day. That would be a lot of emails. If you export event logs to Splunk you may also be able to have them narrow down emails more than ASM can. Not sure about that though.
Hope this helps!