Fortinet FortiGate 50A Installation And Configuration Manual page 135

System configuration
FortiGate-50A Installation and Configuration Guide
Table 17: Alert email message sections
NIDS event Used for NIDS event alert email messages
Section Start <**NIDS_EVENT**>
Allowed Tags %%NIDS_EVENT%%
Section End <**/NIDS_EVENT**>
Virus alert Used for virus alert email messages
Section Start <**VIRUS_ALERT**>
Allowed Tags %%VIRUS%%
%%PROTOCOL%%
%%SOURCE_IP%%
%%DEST_IP%%
%%EMAIL_FROM%% The email address of the sender of the message in
%%EMAIL_TO%%
Section End <**/VIRUS_ALERT**>
Block alert
Used for file block alert email messages
Section Start <**BLOCK_ALERT**>
Allowed Tags %%FILE%%
%%PROTOCOL%%
%%SOURCE_IP%%
%%DEST_IP%%
%%EMAIL_FROM%% The email address of the sender of the message
%%EMAIL_TO%%
Section End <**/BLOCK_ALERT**>
The NIDS attack message.
The name of the virus.
The service for which the virus was detected.
The IP address from which the virus was received.
For email this is the IP address of the email server
that sent the email containing the virus. For HTTP
this is the IP address of web page that sent the
virus.
The IP address of the computer that would have
received the virus. For POP3 this is the IP address
of the user's computer that attempted to download
the email containing the virus.
which the virus was found.
The email address of the intended receiver of the
message in which the virus was found.
The name of the file that was blocked.
The service for which the file was blocked.
The IP address from which the block file was
received. For email this is the IP address of the
email server that sent the email containing the
blocked file. For HTTP this is the IP address of
web page that sent the blocked file.
The IP address of the computer that would have
received the blocked file. For email this is the IP
address of the user's computer that attempted to
download the message from which the file ware
removed.
from which the file was removed.
The email address of the intended receiver of the
message from which the file was removed.
Replacement messages
135