Security Monitoring for failed ACL/Firewall Rule
Looking for an inverse monitor that I can point to a particular host/IP and be alerted when a successful connection is made.
This will allow me to alert if an ACL/Firewall has failed and the service is open to the internet.