Currently SEP12 does not offer a way to send alert notifications for “Potential risks found", only for “Single risk event".

There are 4 categories for SONAR events :  Potential risk found, Commercial application detected, Forced SONAR threat detect and Security risk found

Alerts are only available for the last one.

What if we want to be notified about a Potential new threat, which is basically the main reason for having SONAR enabled ?

Symantec, please make it possible !