Customizing Alert Emails - Fortinet FortiGate FortiGate-50R Installation And Configuration Manual

Antivirus firewall
Table of Contents

Advertisement

Customizing replacement messages

Customizing alert emails

110
Table 3: Replacement message sections
Scanning
Section Start
Allowed Tags
Section End
Quarantine
Section Start
Allowed Tag
Section End
Customize alert emails to control the content displayed in alert email messages sent
to system administrators.
1
Go to System > Config > Replacement Messages.
2
For the alert email message you want to customize, select Modify
3
In the Message setup dialog box, edit the text of the message.
Table 4
lists the replacement message sections that can be added to alert email
messages and describes the tags that can appear in each section. In addition to the
allowed tags you can add any text and HTML code.
4
Select OK to save the changes.
Table 4: Alert email message sections
NIDS event
Section Start
Allowed Tags
Section End
Virus alert
Section Start
Allowed Tags
Used for virus scanning (all services).
<**INFECTED**>
%%FILE%%
The name of the file that was infected.
%%VIRUS%%
The name of the virus infecting the file.
%%URL%%
The URL of the blocked web page or file.
<**/BLOCKED**>
Used when quarantine is enabled (permitted for all scan services and block
services for email only).
<**QUARANTINE**>
%%QUARFILE
The name of the file that was quarantined.
NAME%%
<**/QUARANTINE**>
Used for NIDS event alert email messages
<**NIDS_EVENT**>
%%NIDS_EVENT%%
<**/NIDS_EVENT**>
Used for virus alert email messages
<**VIRUS_ALERT**>
%%VIRUS%%
%%PROTOCOL%%
%%SOURCE_IP%%
%%DEST_IP%%
The NIDS attack message.
The name of the virus.
The service for which the virus was detected.
The IP address from which the virus was received.
For email this is the IP address of the email server
that sent the email containing the virus. For HTTP
this is the IP address of web page that sent the
virus.
The IP address of the computer that would have
received the virus. For POP3 this is the IP address
of the user's computer that attempted to download
the email containing the virus.
System configuration
.
Fortinet Inc.

Advertisement

Table of Contents
loading

This manual is also suitable for:

Fortigate 50r

Table of Contents