Sending Notifications - McAfee EPOLICY ORCHESTRATOR 4.0.2 Product Manual

Sending Notifications

The ePolicy Orchestrator Notifications feature alerts you to events that occur on your managed
systems or on the ePolicy Orchestrator server . You can configure notification rules in ePolicy
Orchestrator to send email messages or SNMP traps, as well as run external commands when
specific events are received and processed by the ePolicy Orchestrator server. The ability to
specify the event categories that generate a notification message and the frequencies with
which such messages are sent are highly configurable.
This feature is designed to notify specific individuals when the conditions of a rule are met.
These include, but are not limited to:
• Detection of threats by your anti-virus software product. Although many anti-virus software
products are supported, events from VirusScan Enterprise include the IP address of the
source attacker so that you can isolate the system infecting the rest of your environment.
• Outbreak situations. For example, 1000 virus detected events are received within five minutes.
• High-level compliance of ePolicy Orchestrator server events. For example, a replication task
was not completed.
You can also configure notification rules to execute commands and launch registered executables
when the specified conditions are met.
Are you setting up Notifications for the first time?
When setting up Notifications for the first time:
1 Understand Notifications and how it works with the System Tree and your network.
2 Plan your implementation. Which users need to know about which events?
3 Define an SNMP server, registered executables, and external commands if you plan to
implement Notifications features that use them.
4 Create notification rules.
Contents
Notifications and how it works
Planning
Determining how events are forwarded
Setting up ePO Notifications
Creating and editing Notification rules
Viewing the history of Notifications
Product and component list
Frequently asked questions
152 McAfee ePolicy Orchestrator 4.0.2 Product Guide