ASA5512 CX - send out e-mail alerts?

[sseifel]

I started working with the ASA 5512-X with CX (Prime Security ver. 9.2.1.3-11) IPS, AVC, and WSE enabled.  Is it possible to send out alerts on detected threats, malware, and other events using e-mail?  Or do I have to do it via the firewall side or use a syslog application?

Thanks in advance.

Scott

[Marvin Rhoads]

You cannot generate emails directly from the CX NGFW services. Nor do CX events (aside from overall module status) generate syslog messages in the base ASA (which is capable of generating e-mails).

However, as of the just-released PRSM 9.3 you can export CX events to a 3rd party syslog server. Most commercial syslog servers have a facility for sending out emails based on receiving certain configured log messages (or preparing a daily digest etc.).