Endpoint Protection

 View Only
  • 1.  SEP 12.1.5 RU 5 Notification

    Posted Mar 26, 2015 02:28 PM

    Is there anyway to test the notification?  I have a notification for Out of Date Virus signitures.  I want to test it "Run Now" rather than waiting for the damper period.  Any recommendations?



  • 2.  RE: SEP 12.1.5 RU 5 Notification
    Best Answer

    Posted Mar 26, 2015 02:36 PM

    There really isn't an easy way to do this. You could create a test group, move one client into it and roll back the defs back to a date you would consider out of date. An alert should trigger.

    You could also just do the EICAR test for the Risk notification.



  • 3.  RE: SEP 12.1.5 RU 5 Notification

    Posted Mar 26, 2015 02:42 PM

    will an alert get created right away or as per damper settings?



  • 4.  RE: SEP 12.1.5 RU 5 Notification

    Posted Mar 26, 2015 02:46 PM

    It will be based on whatever your damper settings are.



  • 5.  RE: SEP 12.1.5 RU 5 Notification

    Posted Mar 26, 2015 06:02 PM

    will an alert get created right away or as per damper settings?

    It will be created at the first occurrence of the trigger condition and then again after the end of the damper period. If you have a damper period of 20 minutes, you'll get alerts at once and then after 20 minutes.

    For some notification conditions, you can disable the damper, however that does not apply to the "Virus definitions out-of-date" condition. For this notification the shortest damper period is 20 minutes.