Forum Discussion
Don_Ryles_52501
Jul 14, 2010Nimbostratus
If there's a valid SMTP server setup in "Device Management : Configuration : SMTP Server" and the admin email setup is defined in "Device Management : Configuration : Admin E-Mail" then I think it should send alerts to UAS changes. Unfortunately they don't seem to get stored on any of the logs on the FirePass itself.
Here's an example of an alert which I received yesterday from one of our boxes -
Subject: FirePass 4100 Security Alert!
Possible intrusion attempt detected against account jabrahams from source IP address 82.68.166.xxx for URI=[/vdesk/intranets/provision.php3?res_group=Sales&res_name=OWA](USER-AGENT changed.[Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)->Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)]. )
Don't forget that IE8 has the compatability setting, where it can change what it declares the browser to be, could that be the cause of your problem?
Kevin S.