Fortimanager - Fortinet FortiGate FortiGate-1000A Administration Manual

FortiManager

FortiManager
120
Table 26: Replacement message tags (Continued)
Tag
%%EMAIL_FROM%%
%%EMAIL_TO%%
%%NIDSEVENT%%
%%SERVICE%%
%%CATEGORY%%
%%FORTINET%%
The US Domestic default mail virus replacement message (splice
mode) is different
The US Domestic default mail virus message (splice mode) replacement message is
changed from:
The file %%FILE%% has been infected with the virus %%VIRUS%% File quarantined
as %%QUARFILENAME%%
to
An email has been infected with the virus %%VIRUS%% File quarantined as
%%QUARFILENAME%%
This change removes the name of the infected file from the replacement message.
The replacement message now only contains the name of the virus that the file is
infected with, and the quarantine filename.
For SMTP email, %%QUARFILENAME%% is the system-generated quarantine file
name. For other email protocols %%QUARFILENAME%% is the original file name. If
quarantine is not enabled for the email protocol, %%QUARFILENAME%% will be
blank.
The %%FILE%% variable is still available. If you add %%FILE%% to the mail virus
message (splice mode) replacement message, %%FILE%% will always add
<no filename> to replacement messages generated for viruses found in SMTP email.
For other email protocols, %%FILE%% adds the name of the infected file to the
replacement message.
Configure the FortiGate unit for IPSec communication between the FortiGate unit and
a FortiManager server. When you enable this feature, all communication between the
FortiGate unit and the FortiManager server takes place using a VPN.
01-28011-0254-20051115
Description
The email address of the sender of the message from which the file
was removed.
The email address of the intended receiver of the message from
which the file was removed.
The IPS attack message. %%NIDSEVENT%% is added to alert email
intrusion messages.
The name of the web filtering service.
The name of the content category of the web site.
The Fortinet logo.
System Config
Fortinet Inc.