Table of Contents
Advertisement
52 Integrating Symantec Mail Security with Symantec Security Information Manager
Interpreting events in the Information Manager
Event ID
(SES_EVENT_<Unique ID>)
SES_EVENT_LIST_UPDATE (92009)
Message events that are sent to the Information Manager
Event ID
(SES_EVENT_<Unique ID>)
SES_EVENT_VIRUS (122000)
SES_EVENT_UNSCANNABLE_VIOL
ATION (112056)
SES_EVENT_MALWARE_CONTENT
(122001)
SES_EVENT_SPAM_CONTENT
(132001)
SES_EVENT_GENERIC_CONTENT
(132000)
SES_EVENT_SENSITIVE_CONTENT
_VIOLATION (182000)
SES_EVENT_GENERIC_CONTENT
(132000)
Administration events that are sent to the Information Manager
Event ID
(SES_EVENT_<Unique ID>)
SES_EVENT_CONFIGURATION_CHANGE
(92008)
Table A-2
Definition Update events that are sent to the Information Manager
Severity
Informational symc_def_update
Table A-3
lists the message events that Symantec Mail Security for SMTPcan
send to the Information Manager.
Table A-3
Message events that are sent to the Information Manager
Severity
Informational
Informational
Informational
Informational
Informational
Informational
Informational
Table A-4
lists the administration events that Symantec Mail Security for SMTP
can send to the Information Manager.
Table A-4
Administration events that are sent to the Information Manager
Event class
Event class
symc_data_virus_incident
symc_data_incident
symc_data_virus_incident
symc_data_incident
symc_data_incident
symc_data_incident
symc_data_incident
Severity
Event class
Informational symc_config_update
Rule Description
(Reason sent)
Permit definition update
Rule Description
(Reason sent)
Virus message
Unscannable violation
Malware message
Spam message
Suspect Spam message
Content violation message
Encrypted message
Rule Description
(Reason sent)
Registration success
Advertisement
Table of Contents
