Hello
I`m using McAfee ePolicy Orchestrator 4.0.0 (build 1083) and McAfee VirusScan Enterprise 8.5.
And I have a problem with email notifications. I have configured a notification rule
SEB Protection Violation Alert
Notes: Notification sends an e-mail message when protection violation is suspected.
Defined at: My Organization\SEB Servers
Priority: High
Status: Enabled
Operating systems: Server
Products: Host Intrusion Prevention
VirusScan
Categories: Access Protection rule violation detected and blocked
Access Protection rule violation detected and blocked (threat)
Application blocked
Buffer Overflow detected and blocked
Host intrusion detected and handled
Network intrusion detected and handled
Unwanted program detected and removed
Virus detected (heuristic) and removed
Virus detected and removed
Threat name: (Any)
Aggregation: Send a notification for every event
Throttling:
Notifications: my email
And it works. Partially. I receive E-mails regarding weekly scan events (and events described in other rules) - but no notifications arrive when OAS handles malware (logs show successful actions). I`ve tried to modify different settings - from removing suppression for all categories of messages to including all products and all categories into the rule desription. Nothing has worked.
So I`d really appreciate any help.