Endpoint Protection

Hello,

I need to implement an email notification when you change the ADC configurations in SEPM.
The objective is to enable the maintenance of versioning in complex environments in which they work more administrators.

Some idea?

Thanks a lot,

Giordano

You cannot implement alerts if configuration changes are made, only when alerts are detected such as "risk" type events (AV, IPS, SONAR, etc.) from threats.

There are no "configuration" type alerts. For these you need to manually review the System log.

Nope. When Policy changes are made no email alert is possible. You may post this as an IDEA.

An email can be triggered only in case of an event or something went wrong. so this isn't directly possible. try these things if they suffice your needs,

In SEPM -Reports- Quick Reports -Audit , this will show the policy change and the user made it

Audit The Audit report contains information about policy modification activities, such as the event times and types, policy modifications, domains, sites, administrators, and descriptions.

on the other hand you can also pull audit log which will have more extensive details.

Go to the Monitors page >> Logs tab

choose the Log type as Audit and Click on View Log

All changes made on the SEPM will be displayed. if required you can also export the log into csv file to apply filter and see

Note: if you are satisfied with the quick report, you can go ahead and schedule it so that it will hit your inbox at regular interval