I have a Pix515 and was wondering if there is an easy way to email administratos when an inspect rule is violated. For example one of my ESMTP rules was violated and the following was logged in syslog:
%PIX-4-108004: ESMTP Classification: Dropped connection for ESMTP Request from outside:22.214.171.124/31095 to inside:mail.ddi.org_INSIDE/25; matched Class 4: header line length gt 998
It is an easy fix, but is there an easier way to be notified without looking in syslog or manually setting up for each case that I want to be notified for? Can the pix email me if one of the inspect rules denies traffic?