McAfee ePolicy Orchestrator, Руководство пользователя

Страница: 69 / 126

66
ePolicy Orchestrator
®
3.6 Walkthrough Guide ePolicy Orchestrator Notifications
Rules
6
Rules
Rules allow you to define when, how, and to whom, notifications are sent, as well as
any executables you want to run when the rule is triggered. You can create or edit rules
once you have made some specific configurations to the feature.
But until all of your configurations are complete and you’ve familiarized yourself with
the abilities of ePolicy Orchestrator, you can use the default rules provided with the
product.
Configuring ePolicy Orchestrator Notifications
To create and use rules, you need to configure the following in Notifications:
„
E-mail server from which to send notification messages.
„
E-mail contacts list from which you select recipients for notification messages.
„
List of SNMP servers to use while creating rules. You can configure rules to send
SNMP traps to SNMP servers when the conditions are met for a rule.
„
List of external commands to run when the conditions of a rule are met.
These are all configured through the interface of Notifications. For instructions, see the
ePolicy Orchestrator 3.6 Product Guide .
Default rules
ePolicy Orchestrator provides six default rules that you can enable for immediate use
while you learn more about the feature.
Before enabling any of the default rules:
„
Specify the e-mail server from which the notification messages are sent.
„
Ensure the recipient e-mail address is the one you want to receive e-mail messages.
„
Send a test e-mail from the
Basic Configuration
section of the
Configuration
tab.
The default rules are described in Table 6-1 :
Note
Notification rules do not have a dependency order.
Note
Once enabled, the default rules send notification e-mail messages to the e-mail
address you provided on the
Set E-mail Address
panel of the installation wizard. This
is also the
Administrator
address in both the Notifications and Rogue System
Detection contact lists.
You can edit any of the default rules as necessary.
Table 6-1 Default notification rules
Rule name Associated events Configurations
Daily unknown
product notification Any events from any
unknown products. Sends a notification message at most, once
a day.
Daily unknown
category notification Any event of an
unknown category. Sends a notification message at most, once
a day.