E-Mail notifications

Hello Dennis,

Please have a look at these articles regarding Alerts:
Sophos Enterprise Console: How to set up endpoint email alerts
 
How to set up Enterprise Console email alerts based on dashboard thresholds

Regards,

Thanks for the articles……
I configure the endpoint alerts like in the article.
This works for me only if i put the endpoint ip to my Exchange Relay authorization.
If i do this not i don't get an email.

But it can not be that I must entitle all endpoints to relay.....

Hello Dennis,

as the endpoints are sending these emails they need an SMTP server that will accept and forward the messages (how else could they be able to send them?)

Christian 

Thats the answer from Sophos:

wenn sie die Antivirus- und HIPS-E-Mail-Benachrichtigung konfigurieren schicken nur die Endpoint Clients die Mails ( z.B. bei einer Erkennung).

Mean that i need an open relay….
I thought the SEC Server receive the mails and send it to the Mailserver.

Thats the answer from Sophos:

wenn sie die Antivirus- und HIPS-E-Mail-Benachrichtigung konfigurieren schicken nur die Endpoint Clients die Mails ( z.B. bei einer Erkennung).

Mean that i need an open relay….
I thought the SEC Server receive the mails and send it to the Mailserver.

Hello Dennis,

the SEC Server receive the mails
no, the SEC server receives the alerts and events (but does not forward them as emails). The functionality is from a time when SEC (central management) did not yet exist. Please note that you get an email for all detections - whether properly dealt with or not. Thus in most cases there's nothing to do in response to these emails (other than deleting or archiving the email [;)]).

Christian