topic Re: How can I test SMTP connection in SmartEvent in Firewall and Security Management

How can I test SMTP connection in SmartEvent

Pedro_Espindola — Mon, 14 Aug 2017 22:07:02 GMT

Hello, everyone,

Up to R80 there was a "Test connection" button in the report configuration page for SmartEvent, which was quite useful.

How can I test the SMTP server connection when configuring a scheduled report in R80.10?

The R80.10 Loggin and Monitoring admin guide describes the procedure for previous version.

Re: How can I test SMTP connection in SmartEvent

PhoneBoy — Tue, 15 Aug 2017 04:36:17 GMT

Not sure why that was removed, but you're correct, it doesn't appear to be there.

Hopefully it can return in later releases.

Re: How can I test SMTP connection in SmartEvent

Sarish_Amrithla — Tue, 19 Jun 2018 11:37:05 GMT

Have the same issue now, reports are configured to be mailed but don't receive anything. is there any cli configuration that can be checked.

Re: How can I test SMTP connection in SmartEvent

PhoneBoy — Tue, 19 Jun 2018 15:32:25 GMT

Unless Kfir Dadosh‌ or Dan Zada‌ have suggestions, I suggest opening a TAC ticket.

Re: How can I test SMTP connection in SmartEvent

Kfir_Dadosh — Wed, 20 Jun 2018 17:33:57 GMT

Which version are you using?

In latest R80.10 JHF you have the "Test Server Connectivity" button:

Re: How can I test SMTP connection in SmartEvent

Sarish_Amrithla — Thu, 21 Jun 2018 06:36:45 GMT

Thanks Kfir and Dameon.

Just to note there is exceptions to the devices

All suitable
(except Smart-1 525/5050/5150 appliances)

Take_112

Re: How can I test SMTP connection in SmartEvent

Sarish_Amrithla — Thu, 21 Jun 2018 10:12:43 GMT

Hi guys, My device is a 5150, on R80.10 with the HF take 103, is there any cli configurations that be checked to investigate further why the reports are not being sent out. I can confirm that there is access from the device to the smtp server as I am able to telnet and connect to it on the smtp port.

Re: How can I test SMTP connection in SmartEvent

Kfir_Dadosh — Thu, 21 Jun 2018 13:21:23 GMT

Can you archive and send us the $RTDIR/log/smartview.log file?

Also, can you tcpdump while running the test?

tcpdump -i lo -s 0 -w smtp.pcap port 25

We have seen an issue with fragmented smtp packet that was dropped by the SMTP server or some middleware in between. We are currently evaluating a fix for this. Assuming this is the same issue, I can provide you with the fix once it will be ready.

Re: How can I test SMTP connection in SmartEvent

Pedro_Espindola — Thu, 21 Jun 2018 13:48:06 GMT

Good to know this is now available! Thanks, Kfir!

Re: How can I test SMTP connection in SmartEvent

Kfir_Dadosh — Mon, 25 Jun 2018 20:58:41 GMT

My mistake guys,

The connectivity test button is available as part of SmartView customers HF, and part of R80.20.

Sorry for the confusion.

Re: How can I test SMTP connection in SmartEvent

Maarten_Sjouw — Mon, 25 Jun 2018 21:31:57 GMT

Hi Kfir, when will this functionality be moved back into the place where it belongs, in the SmartEvent server configuration instead of in the per user configuration of reports?

In R77.30 this was a server based configuration, as it should be, but now each user that schedules a report has to set the mail server configuration. The latter is not really good practice in a MSP setup with many customers on 1 single SE server.

Re: How can I test SMTP connection in SmartEvent

cezar_varlan1 — Tue, 18 Dec 2018 10:25:36 GMT

Is this the only place where you can define an Email server?

This would be needed in

1. Alerts

2. Certain Monitored changes such as failover

3. Distribution of Certificates when using MAB

Is it feasible that this only works with internal sendmail and unauthenticated releay? What is the correct procedure to configure an email server for outgoing notifications on a Check Point Gateway?

Ty,
Cezar

Re: How can I test SMTP connection in SmartEvent

PhoneBoy — Tue, 18 Dec 2018 13:27:32 GMT

As far as I know, the above only applies for this specific SmartEvent report and not generally throughout the product.

For most other places, you configure it here: Configuring "Mail Alerts" using "internal_sendmail" command