Endpoint Protection

 View Only

  • 1.  Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 05:59 AM

    Installed the active X update from M$ and rebooted on two SEP 11 servers last night (both exactly the same hardware/OS-W2K3/and SEPM spec.  Came in this morning to over 25,000 Security Alert Notification emails in my mail box with basically nothing in it (Tamper  /Notifcation Event / Application control Events/ Nothing to report ) but all were from only one of the two SEPM servers. Have rebooted the offending SEPM server - no change.

    Have stopped the SEPM services to stop the emails.

    Anyone experienced anythin similar? got any ideas as to why? and how to stop this happening?

     



  • 2.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:05 AM

    hi,

    Do you have configure any Email notification ?



  • 3.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:06 AM

    Removing the Patch and rebooting also made no difference.  getting roughly 50 emails every minute.



  • 4.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:09 AM

    Hi,

    Do you have configure email alerts in SEPM server ?

    Which Email id Send this alert ?



  • 5.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:16 AM

    SYSTEM email id - is this easy to turn of temporarilt just to remove the email issue?



  • 6.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:20 AM

    You can remove this Email Alert for task Scheduler.



  • 7.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:32 AM

    Just started the SEPM service up again to edit the notification conditions under Monitors, but I am no longer recieving the email deluge I was (and I have'nt modified the notification).

     



  • 8.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 14, 2012 06:45 AM

    hi,

    Can you share Screen Shot ?

    Do you have Login Admin Account in SEPM console ?

     

    How to Configure Symantec Endpoint Protection Manager to Send Email Alerts

     

     



  • 9.  RE: Multiple application Alert emails with 'Nothing to report'

    Posted Sep 15, 2012 12:07 AM

    Please share the screenshots.. Would like to research on this issue

     



  • 10.  RE: Multiple application Alert emails with 'Nothing to report'
    Best Answer

    Trusted Advisor
    Posted Sep 17, 2012 09:16 AM

    Hello,

    This happens when SEPM is not able to process the email notificaiton due to the notification condition .

    I would recommend you to change the Notification condition to ocurrence from 1 to 30 and Increased Minutes to 60.

    Hope that helps!!