Notification Rules And Directory Scenarios - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

6
®
ePolicy Orchestrator 3.6 Walkthrough Guide ePolicy Orchestrator Notifications
About Notifications

Notification rules and Directory scenarios

To show how this feature functions with the Directory, two scenarios are used.
For both scenarios, we can assume that each group, site, and the Directory root of the
console tree has a similar rule configured. Each rule is configured to send a notification
message when 100 virus infection events have been received from any product within
VirusDetected_<node name>
60 minutes. For reference purposes, each rule is named ,
where <nodename> is the name of the node as it appears in the Directory (for
VirusDetected_Group2c
example, ).
Scenario one
For this scenario, 100 virus infections are detected in Goup2C within 60 minutes in a
single day.
VirusDetected_Group2C VirusDetected_Site2
Conditions of the rules , , and
VirusDetected_Directory
are met, sending notification messages (or launching registered
executables) per the rules' configurations.
Figure 6-1 Console tree
63