22-5
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 22 Sending Alerts and Incident Notifications
Configure a Rule to Send an Alert Action
Figure 22-1
MARS Device Configuration Window
Step 2
In the
IP:Port
field of the
Mail Gateway
section, enter the IP address and
Email Domain Name
of your
Mail Gateway server.
Step 3
Click the
Update
button at the bottom of the page to update the MARS configuration.
Configure a Rule to Send an Alert Action
To send alert notifications to individual users or groups of users, configure the Action parameters of a
rule to create an alert action. This procedure configures alerts for pre-existing rules. When you create a
rule, the Action parameters are configured after the count number parameter.
Note
Drop rules do not have Action parameters and cannot trigger alerts.
To modify or create an alert for an existing rule, follow these steps:
Step 1
Click the
RULES
tab to navigate to the Inspection Rules page.
Step 2
Identify the Rule to configure, and click the value displayed in the
Action
field.
The Action Selection dialog box, as shown in
Figure 22-2
, appears below the rule description table. All
previously defined alert actions are listed in the right-hand area of the Action dialog box. An alert action
determines which alert notifications are sent to which users or user groups when the rule fires. You can
edit or delete existing alert actions or create a new one.
