We have a custom application configured with a set of FQDNs and a handful of destination IP's.
Recently, one of the domains resolved to an IP that wasn't included in the application rule, preventing access to the domain.
Is there a way to send an email alert when traffic to an allowed domain no longer makes it through? Something similar to Link Health Rule for destination IPs/Domains?
Cato EmployeeHi Skoberg,
Thanks for the question!
So I would kindly suggest you raise an RFE for this, as we do not have this functionality supported in Cato.
As a potential workaround, you could ensure your firewall rules are configured to enable events and notifications (of course, be aware that this could create some further overhead).
So if traffic becomes blocked because it no longer matches your respective custom app (as in you're use case, because the domain IP changed). The traffic should match another rule or even a block rule, and you should see this in your events, or email notifications.
