topic Re: Human readable mails from SMS in Firewall and Security Management

Human readable mails from SMS

HristoGrigorov — Fri, 11 Jan 2019 05:03:10 GMT

Hello,

I have configured SMS to send mails on certain events. However, what I am getting is not very human readable:

HeaderDateHour: 11Jan2019 6:51:30; ContentVersion: 5; HighLevelLogKey: N/A; Uuid: {0x0,0x0,0x0,0x0}; SequenceNum: 1; Action: ; Origin: CPSMS; IfDir: <; IfName: N/A; Alert: mail; OriginSicName: N/A; System Alert message: A Firewall Policy has been successfully installed on CPFW-1; Object: CPFW-1; Event: Change; Parameter: policy_time; Condition: changes Thu Jan 10 18:28:21 2019; Current value: Fri Jan 11 06:50:03 2019; ProductName: System Monitor; ProductFamily: Network;

Is there any way to make it more easy to read or even better use my own template for that ?

Re: Human readable mails from SMS

Danny — Fri, 11 Jan 2019 07:16:29 GMT

This is true. A better alternative would be having SnartEvent sending you mails on specific events. These mail are then human readable.

Re: Human readable mails from SMS

HristoGrigorov — Fri, 11 Jan 2019 07:29:56 GMT

The one I pasted is from SmartEvent actually. You can only get policy install notifications from it as far as I know.

Re: Human readable mails from SMS

ED — Fri, 11 Jan 2019 08:33:52 GMT

This is a way to setup alerts for policy installation and then you will recieve the same output as you did: https://community.checkpoint.com/thread/8259-pssst-something-is-wrong

Re: Human readable mails from SMS

HristoGrigorov — Fri, 11 Jan 2019 08:49:46 GMT

Yes, that's the procedure I followed some time ago. Thanx for sharing it. Unfortunately output is heavily obfuscated Similar mails are coming about other events as well.

I hope there is a way to customize it. Like a CRLF after ";" will improve it a bit.

Re: Human readable mails from SMS

ED — Fri, 11 Jan 2019 09:15:18 GMT

Totally agree with you. The output could be better formatted to differentiate events. Check Point can do better on this