Rules; Configuring Epolicy Orchestrator Notifications; Default Rules - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide

Rules

Configuring ePolicy Orchestrator Notifications

Default rules

Rules allow you to define when, how, and to whom, notifications are sent, as well as
any executables you want to run when the rule is triggered. You can create or edit rules
once you have made some specific configurations to the feature.
But until all of your configurations are complete and you've familiarized yourself with
the abilities of ePolicy Orchestrator, you can use the default rules provided with the
product.
Notification rules do not have a dependency order.
Note
To create and use rules, you need to configure the following in Notifications:
E-mail server from which to send notification messages.
E-mail contacts list from which you select recipients for notification messages.
List of SNMP servers to use while creating rules. You can configure rules to send
SNMP traps to SNMP servers when the conditions are met for a rule.
List of external commands to run when the conditions of a rule are met.
These are all configured through the interface of Notifications. For instructions, see the
ePolicy Orchestrator 3.6 Product Guide.
ePolicy Orchestrator provides six default rules that you can enable for immediate use
while you learn more about the feature.
Once enabled, the default rules send notification e-mail messages to the e-mail
address you provided on the
Note
Administrator
is also the
Detection contact lists.
You can edit any of the default rules as necessary.
Before enabling any of the default rules:
Specify the e-mail server from which the notification messages are sent.
Ensure the recipient e-mail address is the one you want to receive e-mail messages.
Send a test e-mail from the
The default rules are described in
Table 6-1 Default notification rules
Rule name Associated events
Daily unknown Any events from any
product notification unknown products.
Daily unknown Any event of an
category notification unknown category.
Set E-mail Address
panel of the installation wizard. This
address in both the Notifications and Rogue System
Basic Configuration
section of the
Table 6-1:
Configurations
Sends a notification message at most, once
a day.
Sends a notification message at most, once
a day.
66
ePolicy Orchestrator Notifications
Configuration
tab.
6
Rules