Forum Discussion

MaheshMJ's avatar
2 months ago

Setting up custom email alerts for changes in CMA

We would like to see email alerts when either of the following changes are made in the Cato Management App

  1. Firewall policies are added/modified
  2. Routing changes are made.
  3. changes are made to the TLS inspection policy
  4. Any other changes that could affect the security profile

How can we setup such email alerts

  • Hi MaheshMJ, 

    Currently, configuration changes are logged in Audit trail.
    Would you like/be looking at receiving notifications based on Audit Trail logs?

    Thank you.

    • MaheshMJ's avatar
      MaheshMJ
      Comet

      yes, we would like to receive notifications on audit trail logs

       

      • michaelsaw's avatar
        michaelsaw
        Icon for Cato Employee rankCato Employee

        Hi MaheshMJ, 

        Appreciate your feedback.
        There is an existing solution using Cato API to access/collect the Audit trail logs: https://support.catonetworks.com/hc/en-us/articles/360017900857-Cato-API-AuditFeed

        Would this be alright?

        Thank you.

  • Hi Joe, 

    Gotcha!
    Perhaps you may like to reach out to your assigned Cato Representative and consider submitting and RFE.

    Cheers

  • Yes, email notifications should be sent for making any changes by Admin so that other admins or CISO is aware of any such changes and even regulator sometimes ask about the same.

    • Nath's avatar
      Nath
      Meteor

      The only problem I would see is that the events shown within the  existing Audit Trail in CMA are voluminous, and not easy to decipher in terms of 'before' and 'after'.

      Try doing a few changes in the CMA and check the Audit Trail and you will see what I mean.  For a single change, you can see many events.

      So just be careful if you are sending emails for the audit events as you may get overhelmed and not easily see what has actually changed.