This article applies to:

• WFR
• R3000

Question:

• Is there a way to send an administrator an email alert whenever an override account is been used?

Information:

Override accounts are been used because someone went to a site that is been blocked and he/she is trying to override the blocked site.
So the closes option for now is if you have a TAR -threat analysis reporter you can configure it to send you email alerts whenever someone goes to a blocked site and even that can not tell if they eventually used an override account. So at this time the filter does not have such an option.