Endpoint Protection

 View Only
Expand all | Collapse all

Sending alerts of threats through email

  • 1.  Sending alerts of threats through email

    Posted Jun 26, 2009 07:00 AM
    I'm trying to configure our Symantec report server, embedded inside Symantec System Center, so that It advice me about threats founds on our clients, through email.
    Unfortunately I cannot find some settings where to specify the username and password that will connect to SMTP server, authenticate and send emails. Although there's the possibility to setup the Agent to send email, clicking on the Administrator tab -> Agent Configuration on the Reporting site, there seem to be no place where to specify the mail account details, in this case the password.
    Anyone has some ideas where I can configure properly the Reporting agent? Probably I'm missing just few settings...

    Thanks in advance,
    Leonardo D'alimonte 


  • 2.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 09:54 AM
    Hi.

    Are you using SEP - as you seem to be reffering to Symantec System Centre which I think is in SAV not SEP. We could never get reporting to work on SAV anyway, in fact no one could fix this for us. And when it worked for the first month when we deployed SAV, the RISK report was inaccurate anyway

    for SEP

    under the console you can tell the SEPM where and how to connect to your mail server.

    click on 'Admin' from the SEPM console - it's on the left hand side.

    then at the bottom click on 'Servers'

    now up at the top you should see information about your SEP setup.....

    Right click on the server where SEPM is installed and select 'Edit Properties'

    From here you can see the 'Mail Server' tab - enter the details necessary for your mail server -


  • 3.  RE: Sending alerts of threats through email



  • 4.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 10:17 AM
    SAV's email alerts were 10 times better than SEP's alerts.
    SAV sent you real and meaningful information, SEP sends precious little.
    So if you are used to the info SAV sent, you'll be sorely disappointed with SEPs lack of details. Basically, you'll get some tidbits and a computer name, but will need to dig into logs to get anything truly useful.


  • 5.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 10:20 AM
    I agree with Shadow Papa. The SEP reports are really not up-to- datest, where as SAV is much better in comparision


  • 6.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 10:25 AM
    I agree with having to dig deeper for the information in SEP.

    My problem with SAV reporting was that it never really worked.....and the brief time it did work wasn't reporting on all clients with risks....for example it might report 10 machines having risks when in actual fact it was 100.

    Symantec response after going through everything was to upgrade  - which stopped it working altogether.



  • 7.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 10:41 AM
    My question to you is Was that really configures accordingly????  I guess No It Wasn't.


  • 8.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 11:25 AM
    ha, well if it wasn't, Symantec support sure couldn't figure it out - and if they couldn't figure out how their own product works then how the hell was I supposed to?

    At the time I seem to remember it being a popular topic on the internet regarding problems with the reporting feature - but I guess they must also have not had it configred accordingly :-)


  • 9.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 11:55 AM
    If you think the alerts in SEP doesn't contain enough information, go here and comment:

    https://www-secure.symantec.com/connect/idea/email-virus-alerts-have-less-info-compared-sav-10

    Back to the OP's question:
    It doesn't look like it's possible to specifiy username and password in Symantec Reporter, but in SEPM, there it is possible to specify this information.


  • 10.  RE: Sending alerts of threats through email

    Posted Jun 26, 2009 09:30 PM
    We had issues with SAV10.1 in sending e-mail reports and had not completely made it to work until we upgraded to SEPv11... Reporting not detailed in SEP.. you still need to access the logs for a more detailed information...

    Just a tip.. so that you will not be spammed by so many alerts.. filter them only to send those that were not fixed by SEP like left alone... also have it set to send e-mail alerts on outbreaks..

    thanks...


  • 11.  RE: Sending alerts of threats through email

    Posted Jun 29, 2009 03:22 AM
     Hi outrunred,
    thanks to your quick reply. Actually i'm using SAV 10.1, and seems really difficult to use the email notifications, really strange because sounds to me like a key feature of a Corporate Antivirus at these times. Thanks to the trialware, I'm testing also the SEPM console, which seems really more open to customizations of the clients, starting from the settings of email notifications.
    I'm not still confident to rate the notifications feature of both the AVs, but you're so confident of the detailed informartions that SAV provide, can you tell me how to properly configure it?

    Thanks a lot to everyone for the help,
    Leonardo