You can configure Symantec Endpoint Protection to send you an email message each time the firewall detects a rule violation, attack, or event. For example, you may want to know when a client blocks the traffic that comes from a particular IP address.
To set up notifications for firewall rule violations
In the console, open a Firewall policy.
On the Firewall Policy page, click Rules.
On the Rules tab, select a rule, right-click the Logging field, and do one or more of the following tasks:
When you are done with the configuration of this policy, click OK.
Configure a security alert.
Configure a mail server.