117
ePolicy Orchestrator
®
3.6 Walkthrough Guide
Advanced Feature Evaluations
ePolicy Orchestrator Notification
9
6
Although for this task you will leave the defaults on this page selected, the
Set
Thresholds
page allows you to limit the number of notification messages you receive
for the rule. For example, you can define any rule to send you messages only when
the number of events or the number of affected systems have reached a specified
number within a specified time frame (
Aggregation
). You can further limit the number
of messages that are sent by specifying an amount of time to take place before
receiving another message (
Throttling
). Throttling is almost always recommended by
McAfee to prevent a flood of messages during an outbreak situation.
Leave
Send a notification for every event
selected, and click
Next
.
7
On the
Create Notifications
page, click
Add E-mail Message
.
8
Click
Administrator
in the box on the left of the page, then click
To
so that
Administrator
moves to the
Notification Recipient(s)
box.
This specifies that the e-mail address you configured (for the
Administrator
contact)
is sent the notification message you are about to configure.
9
Type a
Subject
for the e-mail that will be sent to
Administrator
when this rule is
triggered. For example,
Threat detected by VirusScan
.
10
Type a
Body
for the e-mail message that will be sent when this rule is triggered. For
example,
VirusScan detected a threat
.
11
By inserting multiple variables into the body of the message, you can have
meaningful information from the event files inserted into your notification message.
For the purpose of this section of the guide, select
Affected computer names
and click
Body
. This will place the name of the affected system, if available from the event file,
in the body of the e-mail message. Click
Save
.
You can create multiple messages in multiple formats to send to multiple recipients,
as well as choosing external commands to run, from the
Create Notifications
page.
These are beyond the scope of this document. See the
ePolicy Orchestrator 3.6
Product Guide
for more information.
12
Click
Next
and verify the configurations you made to the rule you created on the
View
Summary
page, then click
Finish
.
Figure 9-3 Set Thresholds page
Summary of Contents for ePolicy Orchestrator
Page 2: ......