McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual page 120

®
ePolicy Orchestrator 3.6 Walkthrough Guide
6 Although for this task you will leave the defaults on this page selected, the
Thresholds
page allows you to limit the number of notification messages you receive
for the rule. For example, you can define any rule to send you messages only when
the number of events or the number of affected systems have reached a specified
number within a specified time frame (
of messages that are sent by specifying an amount of time to take place before
receiving another message (
McAfee to prevent a flood of messages during an outbreak situation.
Figure 9-3 Set Thresholds page
Send a notification for every event
Leave
Create Notifications
7 On the
Administrator
8 Click in the box on the left of the page, then click
Notification Recipient(s)
moves to the
This specifies that the e-mail address you configured (for the
is sent the notification message you are about to configure.
Subject
9 Type a for the e-mail that will be sent to
Threat detected by VirusScan
triggered. For example,
Body
10 Type a for the e-mail message that will be sent when this rule is triggered. For
VirusScan detected a threat
example,
11 By inserting multiple variables into the body of the message, you can have
meaningful information from the event files inserted into your notification message.
For the purpose of this section of the guide, select
Body
. This will place the name of the affected system, if available from the event file,
in the body of the e-mail message. Click
You can create multiple messages in multiple formats to send to multiple recipients,
as well as choosing external commands to run, from the
These are beyond the scope of this document. See the ePolicy Orchestrator 3.6
Product Guide for more information.
Next
12 Click and verify the configurations you made to the rule you created on the
Summary
page, then click
Aggregation
). You can further limit the number
Throttling
). Throttling is almost always recommended by
selected, and click
Add E-mail Message
page, click
box.
Administrator
.
.
Affected computer names
Save
.
Finish
.
117
Advanced Feature Evaluations
ePolicy Orchestrator Notification
Set
Next
.
.
To Administrator
so that
Administrator
contact)
when this rule is
and click
Create Notifications
page.
View
9