hello there,
my customer asks if there's a way to configure an alert that would send an email to the specific remote user, at the moment it logins through remote access client VPN (check point mobile client for windows in this scenario).
Scenario:
- Cluster VSX (VSLS) R80.40 JHF take 91
- SMS pr + sec R80.40 JHF take 91
- SmartEvent R80.40 JHF take 91
- Firewall, IPSec VPN, Identity Awareness Software Blades enabled
- Multi-Factor Authentication with Machine Authentication + User Auth (LDAP). (New VPN Deployment ON-GOING)
- 500 remote user
Reflections:
The challenge in the request is that it would be necessary to deploy a script in the smartevent that would send a mail for a specific recipient, for each log received.
Moreover, info of the recipient would be included (ex: if the log contains the string "the user x98765 login..." (x98765 user internal ID) it would be necessary to extract its email recipient from the user ID data.
thanks in advance
