Virus Alert emails, stopped working!
Updated: 05 Jun 2010 | 13 comments
Hello,
Need help with virus alert emails! This feature used to work and now it doesn't seem to send out any email alerts at all. Would anyone know why? I checked the settings on Symantec System Center Console and can't tell if anything is out of order. Can someone point me to right direction?
Symantec Anti virus and Symantec System Center: Version: 10.1.6.6000
Your help is appreciated.
Thanks.
Discussion Filed Under:
Comments
Check the Reporting Server
Check the Reporting Server Configuration Check these documents and make sure everything is properly configured.
Using alerts on a reporting server with Symantec AntiVirus 10.1 and Symantec Client Security 3.1
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/8e684f152f2f38c688257141007bd866?OpenDocument
How to configure the outbound SMTP server in Reporting
http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/ef6b0d7d8ade3d5588257348007a262d?OpenDocument
VMWARE-- SEP 12.1 vs McAfee vs Trend Micro
Vikram, Not using reporting
Vikram,
Not using reporting server to send email alerts, instead ams tools.
Thanks.
Reporting Server or AMS?
Hi Michelangelo10,
Did the links above help? Generally Reporting Server's notifications work pretty well.
That assumes that you are using Reporting Server and not the legacy AMS tool for sending emails. If you are using AMS, I really recommend migrating away from it. Reporting Server is much more powerful and up-to-date.
Speaking of which.... I recommend updating your SAV and Resporting Server versions, if possible. SAV 10.1.6 is relatively old. Upgrading servers, clients, SSC and Reporting Server components to SAV 10.1.9.9000 will provide scores and scores of enhancements and improvements. Reliability and protection are both better under MR9.
Thanks and best regards,
Mick
With thanks and best regards,
Mick
Hi Mick2009,We are using
Hi Mick2009,
We are using AMS tools, however when i launch the ams amdinistration utility - Configure AMS, the alert actions list is empty?!
I tried following this article, but that is not possible because my alert list is empty.
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003032809291348
Does anyone know what the problem is? Also this utility is installed on the parent server and we only have one parent server.
hi
what do u get when you slect view ams logs?
does it show any of your previous logs which worked fine?or is that empty too.
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
the ams logs is empty as
the ams logs is empty as well? no records....
hi
not sure why it got vanished can you configure a test configuratin and check if thats working?
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
sorry, but how would i go
sorry, but how would i go about doing that?
hi
not a problem please follow this doc
How to configure AMS to send email alerts when Symantec AntiVirus Corporate Edition detects a risk
http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2003032809291348
.How to use the EICAR test string
http://service1.symantec.com/Support/nav.nsf/docid/19975295056
Please don't forget to mark your thread solved with whatever answer helped you : ) Rafeeq
i'm not able to configure
i'm not able to configure ams, if you recall the thread above the one with a screen shot. the problem resides on the alert list under configure ams, because it contains nothing in it so there is nothing to be configured. why is that? I don't know, and i'm trying to find that out. the parent server doesn't seem to have auto protection on, although the antivirus its self is working and is cleaning up infected files by deleting them. see screenshot below.
on the client side, auto protect is enabled. as soon as the eicar file is droped on my desktop auto protect launches the popup notifying me that the detected file was deleted. i really don't know what went wrong that all of a sudden it would stop working, (email alerts)..
We've been having this issue
We've been having this issue for a while now. I just gave up on receiving the alerts and I keep an eye on the management console and quarantine console on a regular basis.
its good to know that I'm not
its good to know that I'm not the only one with this issue...but at the same time it is an issue for some of us, so it would be beneficial if symantec staff can troubleshoot this!
It makes no sense for it to work, and all of a sudden to stop working...so it is an issue and i would like to get it resolved.
My other option is to enable reporting server... and quite frankly, i do not need this setup, since i won't use any of its features...all i want is simple alert email telling me that user 1 has a virus and a virus is found on user 1's computer.
AMS "Alert Actions" screen appears with no alerts to configure
Hi Michelangelo,
If you wish for Symantec staff to troubleshoot the issue with you, I recommend that you contact Technical Support. This forum operates by voluntary peer-to-peer assistance.
AMS is an old technology- it has been years since I have used it myself, but a search returns a document still available which describes what you are seeing. Have you checked these suggestions out yet?
AMS "Alert Actions" screen appears with no alerts to configure
Also: can you find the iaolog.dat file. How big is it? If it has grown too large, then the Intel services that AMS uses may time out when starting or stopping (resulting in what you are seeing)
Are there .ATD files in place in the ams_ii folder-? If not, drop in the ones from your backup copy and restart the AMS-related services. See if that works.
Another trick - change the value 'AMS' from '1' to '0', and then back to '1', under the following Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\Common, and then restart all the INtel and SAV Services.
Hope this helps! Let the forum know how you get on.
Thanks and best regards,
Mick
With thanks and best regards,
Mick
Would you like to reply?
Login or Register to post your comment.