Endpoint Protection

I was windering if there is a way to setup Notifications to include any of the following details?

• Virus alerts which also include the hash of the suspect file.
• Network Threat Protection email alerts which include the actual URL that was being blocked. The current email shows traffic to/from our proxy server is being blocked, but we need to review the SEPM log to see the actual address which caused the issue.

Whenever we receive these types of alerts, we need to logon to the SEPM and extract these details from the logs. Is there a way to include these details in the alert emails?

There is no ability to customise these alerts. What you see is what you get.

Also, SEP is not proxy aware unfortunately so it will only show your proxy address as you have already seen.

No, it is not possible to customize.

You can try SQL query, the way it is done here

https://www-secure.symantec.com/connect/forums/custom-report-sepm-121-sql-query

But not sure if it would go that granular what you want.

Embeded database dosenot support

Right but we are not sure, yet if he is using embedded or SQL :)

Hi

As per your requirement you can schedule the report for virus detected but cannot have the hash value of the file

Regards