Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 464
  • Last Modified:

SRX240 web filter results by email or.... ?

I'm using an SRX240 for web filtering.  Ideally, I'd like to receive a summary email every 8 hours or so that lists all the blocks that occurred.  (I believe that 8 hours will generate a manageable-sized log - but that's a good question).

So, I guess this means collecting the results in a log somewhere / somehow.
Sending the log out via email.
Repeat and delete the old log.

How might one do this?
0
Fred Marshall
Asked:
Fred Marshall
1 Solution
 
dpk_walCommented:
Logs generated by different daemon have different keywords. For webfiltering we can filter logs on keyword WEBFILTER_ using CLI as below:
set system syslog file webfilter-log match WEBFILTER_ any any

Here we create syslog file named webfilter-log.

Now we can create this file on the SRX itself and then create a shell script which would FTP/SCP file to the designated server [using crontab] and then delete the file from SRX.
Once the file is on FTP/SCP server there can be another script running which would pick and email the file.
OR we can have SRX send logs to a remote syslog server and there you can work on the logs as you need.

Also, have a look at KB: http://kb.juniper.net/KB28213

Thank you.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now