Alarm Notification
After alarm notification is enabled, CFW will send notifications to you through the method you specified (such as email or SMS) so that you can monitor the firewall status and quickly detect exceptions.
![](https://support.huaweicloud.com/eu/usermanual-cfw/public_sys-resources/note_3.0-en-us.png)
- Simple Message Notification (SMN) is a paid service. For details, see SMN Pricing Details.
- Before setting alarm notification, you are advised to create a message topic in SMN. For details, see Before You Publish a Message.
Prerequisites
The SMN service has been enabled.
Attack Alarms
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- In the navigation pane, click
and choose . The Dashboard page will be displayed, as shown in Figure 1.
- (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
- In the navigation pane, choose System Management > Notifications.
Figure 2 Alarm notifications
- In the Operation column of Attack alarm, click Edit, and configure notification item parameters. For details, see Table 1.
Figure 3 Notification item settings - attack alarm
Table 1 Attack alarm parameters Parameter
Description
Description
IPS attack alarm
Level
Select the risk levels that trigger notifications.
The options are Serious, High, Medium, and Low. Multiple options can be selected.
For example, if you select High and Medium, the firewall will notify you by SMS message or email when detecting an intrusion with a high- or medium-level risk.
Notification Time
Select a time range for sending notifications.
Trigger Condition
Configure the trigger condition.
NOTE:Alarm notifications are sent if the number of attacks is at least equal to the threshold configured for a certain period.
Recipient Group
Select a topic from the drop-down list to configure the endpoints for receiving alarm notifications.
- Click OK.
- In the Status column of Attack alarm, click
to enable it.
High Traffic Warning
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- In the navigation pane, click
and choose . The Dashboard page will be displayed, as shown in Figure 4.
- (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
- In the navigation pane, choose System Management > Notifications.
Figure 5 Alarm notifications
- In the Operation column of High Traffic Warning, click Edit, and configure notification item parameters. For details, see Table 2.
Figure 6 Notification item settings - high traffic warning
Table 2 High traffic warning parameters Parameter
Description
Description
An alarm is generated if the traffic reaches the specified percentage of the traffic processing capability you purchased.
Level
Select a percentage. When the maximum peak inbound or outbound traffic reaches the percentage of the traffic processing capability you purchased, an alarm notification is triggered.
For example, you can select 70%, 80%, or 90%.
If this parameter is set to 80%, an alarm notification is sent when the used traffic reaches 80% of the purchased traffic.
Notification Time
Select a time range for sending notifications.
Trigger Condition
Once a day
Recipient Group
Select a topic from the drop-down list to configure the endpoints for receiving alarm notifications.
- Click OK.
- In the Status column of High Traffic Warning, click
to enable it.
EIP Not Protected
- Log in to the management console.
- Click
in the upper left corner of the management console and select a region or project.
- In the navigation pane, click
and choose . The Dashboard page will be displayed, as shown in Figure 7.
- (Optional) If the current account has only one firewall instance, the firewall details page is displayed. If there are multiple firewall instances, click View in the Operation column to go to the details page.
- In the navigation pane, choose System Management > Notifications.
Figure 8 Alarm notifications
- In the Operation column of the EIP Not Protected alarm, click Edit, and configure notification item parameters. For details, see Table 3.
Figure 9 Notification settings - EIP Not Protected
Table 3 Parameters of the alarm EIP Not Protected Parameter
Description
Description
This alarm indicates there are unprotected EIPs.
Level
The default value is 100%.
Notification Time
Select a time range for sending notifications.
Trigger Condition
Once a day
Recipient Group
Select a topic from the drop-down list to configure the endpoints for receiving alarm notifications.
- Click OK.
- In the Status column of EIP Not Protected, click
to enable it.
Related Operations
To add assets to the EIP Not Protected alarm whitelist, click Add to Alarm Whitelist in the Operation column of the alarm. Select EIPs, add them to the whitelist on the right, and click OK. The whitelisted EIPs will no longer trigger this alarm.
![](https://support.huaweicloud.com/eu/usermanual-cfw/en-us_image_0000001762774392.png)
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.