Is there a way to be alerted when Firewall Port-Forward/Whitelist changes are made?

[rdollarhide]

I've been searching for a way to monitor port forwarding configurations for firewalls. Basically, I'd like a way to be alerted if an IT admin changes or erroneously configures port forwarding (and IP whitelisting). I do not have a specific network device in mind but likely targets for my company might be Cisco (ASA, IOS) or SonicWall devices.

Basic use case:
1. Zabbix monitors device
2. IT Admin makes a change
3. Zabbix sends alert that change is mis-configured

I can't find any examples of this anywhere. Is it something I could have Zabbix parse out of a syslog? Would I need to build custom code to trigger Zabbix when the change occurs?

Thanks for any help