IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.
“Configuration” tab
This tab contains all the necessary parameters for configuring e-mail alerts.
It consists of the following elements:
Enable e-mail notifications
This option enables the configuration of alerts. If it is disabled, none of the configuration items will be accessible as the firewall will not send ay e-mails. This option is disabled by default.
REMARK
The e-mail notification feature requires a mail server that can receive e-mails from the firewall.
SMTP server
| Server |
This field determines the host (SMTP server) to which the firewall will send e-mails, by selecting it from the object database. This field is empty by default. |
| Port |
Port on the SMTP server to which e-mails will be sent. A list allows selecting an object, whose default value will be “SMTP”. |
| E-mail address |
Specifies the e-mail address of the sender and makes it possible to ensure compatibility with external SMTP services such as Microsoft Office 365. The sender's e-mail address suggested by default starts as follows: '<firewall_name>@'. |
|
Authentication |
A login and password can now be defined for sending e-mails via the firewall. This checkbox allows you to enable the authentication of the firewalls when sending e-mail alerts. |
| Identifier |
This entry is disabled if the Authentication option has not been selected. This field allows entering the SMTP username (this entry has to be provided if authentication has been enabled). |
| Password |
This entry is disabled if the Authentication option has not been selected. This field allows entering the SMTP username (this entry has to be provided if authentication has been enabled). |
| Testing the SMTP configuration |
This button makes it possible to send a test e-mail to check the firewall's SMTP configuration. After having clicked on Test the SMTP configuration, enter the e-mail address of the recipient for the test e-mail in the window that opens, then click on Send. |
E-mail sending frequency (in minutes)
| Sending frequency |
This option allows you to specify the frequency with which reports will be sent. A report contains all the alarms detected from the previous report. As such, e-mails will be received during certain time slots and not each time an alarm is raised. The default value is 15. |
Intrusion prevention alarms
Here, you may select a group to notify of intrusion prevention alarms.
The list of alarms will be sent in the body of the e-mail to the specified group.
The frequency for sending alarm reports can be modified in the field “Sending frequency” in the menu E-mail sending frequency (in minutes).
Example
If you define a frequency of 15 minutes in the field Sending frequency, you will be informed by e-mail every 15 minutes of alarms that were raised on the firewall during this period.
| Do not send any e-mails |
No e-mails regarding alarms will be sent to a specific recipient. This option is selected by default, and used to enable e-mail notifications in order to approve certificate requests, for example, without necessarily generating e-mails for alarms. |
| Send according to alarm and event settings |
Only intrusion prevention and system event alarms for which the Send an e-mail checkbox has been selected will activate the sending of an e-mail. |
| Send only major alarms |
If this option is selected, the group selected in the next field will receive major alarms, which will act as a configured e-mail notification (Applications and Protections module / Advanced column). |
| Message recipient |
Selection of the group that will receive major intrusion prevention alarms. |
| Send major and minor alarms |
If this option is selected, the group selected in the next field will receive major and minor intrusion prevention alarms, which will act as a configured e-mail notification (Applications and Protections module / Advanced column). |
| Message recipient |
Selection of the group that will receive major and minor intrusion prevention alarms. |
System events
Like the previous field, a group can also be notified of system events.
The frequency for sending system events can be modified, likewise, in the field Sending frequency in the menu E-mail sending frequency (in minutes).
| Do not send any e-mails |
No e-mails regarding system events will be sent to a specific recipient. This option is selected by default, and used to enable e-mail notifications in order to approve certificate requests, for example, without necessarily generating e-mails for system events. |
| Send only major alarms |
If this option is selected, the group selected in the next field will receive major system events, which will act as a configured e-mail notification (Applications and Protections module / Advanced column). |
| Message recipient |
Selection of the group that will receive major system events. |
| Send major and minor alarms |
If this option is selected, the group selected in the next field will receive major and minor system events, which will act as a configured e-mail notification (Applications and Protections module / Advanced column). |
| Message recipient |
Selection of the group that will receive major and minor system events. |
REMARK
The status of system events can be viewed in a module of the same name: In the menu, go to Notifications>System events.