Customizing Alert Emails - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

System configuration

Customizing alert emails

FortiGate-800 Installation and Configuration Guide
Customize alert emails to control the content displayed in alert email messages sent
to system administrators.
To customize alert emails
1 Go to System > Config > Replacement Messages.
2 For the alert email message that you want to customize, select Modify
3 In the Message setup dialog box, edit the text of the message.
Table 36 lists the replacement message sections that can be added to alert email
messages and describes the tags that can appear in each section. In addition to the
allowed tags you can add text and HTML code.
4 Select OK to save the changes.
Table 36: Alert email message sections
NIDS event
Section Start
Allowed Tags
Section End
Virus alert
Section Start
Allowed Tags
Section End
Block alert
Section Start
Allowed Tags
Used for NIDS event alert email messages
<**NIDS_EVENT**>
%%NIDS_EVENT%%
<**/NIDS_EVENT**>
Used for virus alert email messages
<**VIRUS_ALERT**>
%%VIRUS%%
%%PROTOCOL%%
%%SOURCE_IP%%
%%DEST_IP%%
%%EMAIL_FROM%% The email address of the sender of the message in
%%EMAIL_TO%%
<**/VIRUS_ALERT**>
Used for file block alert email messages
<**BLOCK_ALERT**>
%%FILE%%
%%PROTOCOL%%
The NIDS attack message.
The name of the virus.
The service for which the virus was detected.
The IP address from which the virus was received.
For email this is the IP address of the email server
that sent the email containing the virus. For HTTP
this is the IP address of web page that sent the
virus.
The IP address of the computer that would have
received the virus. For POP3 this is the IP address
of the user's computer that attempted to download
the email containing the virus.
which the virus was found.
The email address of the intended receiver of the
message in which the virus was found.
The name of the file that was blocked.
The service for which the file was blocked.
Replacement messages
.
183