Mail alerts for outgoing Ldap traffic for detect log4j or any recommendations are welcome.

[AS2021]

Hi everyone,

Is it possible in Checkpoint to put up mail or SMS alerts on ldap notices out of the house? In connection with log4j, we would like to use it as an alert that we have been compromised. If in other good suggestions for detection whether one is compromised by log4j, then we are very open.

Thanks

[_Val_]

Not exactly what you are looking for, but you may want to use this: https://community.checkpoint.com/t5/SmartEvent/log4j-views/m-p/136794#M33

[AS2021]

Hi 
Thanks for the link.
But I am looking for if possible in checkpoint smartconsole set mail alerts for outgoing ldap traffic if suspicious for log4j activity?

If match this activity then get alert and send mail notification to us or send sms to phone ?

BR

[_Val_]

Update IPS, find relevant attack, set customer alerts with emails.

The protection details are here: https://www.checkpoint.com/defense/advisories/public/2021/cpai-2021-0936.html