Show Posts
1
19.7 Legacy Series / Send an email alert when someone login on OPNSense (SSH or Web interface)
« on: January 10, 2020, 01:53:28 pm »
Hi everybody,
I'm a new OPNSense user and I've been asked to configure our OPNSense firewall/proxy to send an email whenever someone login via SSH or web management interface to it.
My boss would like to know (at least):
username used to login (at the moment only root is defined, in future there will be more admin user profiles)
ip from login comes from (to better understand suspicious activity on the lan).
Any other useful info would be appreciated.
I've read Monit documentation and FAQ and searched on the forum but it does not seem to trigger logins, as far I know nobody in the forum has asked anything similar (correct me if wrong).
Any of you has never faced such a type of request?
Probably I need to install something to monitor logins but my knowledge on OPNSense is low, very low... so if something is already bult in is better (for me).
Thank in advance for your suggestions
Ale
I'm a new OPNSense user and I've been asked to configure our OPNSense firewall/proxy to send an email whenever someone login via SSH or web management interface to it.
My boss would like to know (at least):
username used to login (at the moment only root is defined, in future there will be more admin user profiles)
ip from login comes from (to better understand suspicious activity on the lan).
Any other useful info would be appreciated.
I've read Monit documentation and FAQ and searched on the forum but it does not seem to trigger logins, as far I know nobody in the forum has asked anything similar (correct me if wrong).
Any of you has never faced such a type of request?
Probably I need to install something to monitor logins but my knowledge on OPNSense is low, very low... so if something is already bult in is better (for me).
Thank in advance for your suggestions
Ale