Question on your Fortigate SSL VPN Hardening Guide

[chr00ted]

Thanks for your Guide! I was wondering if you ever published your collection of automation stitches that will include also this email alerts?

[yuriskinfo]

Hi, yes it is located at https://github.com/yuriskinfo/Fortinet-tools -> Automation Stitches

If you need to get email on successful SSL VPN login, there is an example of doing so BUT with additional match on source IP - just removing this condition of IP match will get you email on successful logins: https://github.com/yuriskinfo/Fortinet-tools/blob/main/Fortigate-automation-stitches/ssl-vpn-user-login-successful-from-specific-ip-alert-by-email.adoc

Change only Trigger to:

config system automation-trigger
 edit "TunnelisUpLog"
 set event-type event-log
 set logid 39947
end