topic Re: Endpoint Alert Message in Endpoint

Endpoint Alert Message

Sukru_isik — Tue, 13 Mar 2018 14:10:54 GMT

When the user is blocked by endpoint blades(Anti-Bot,Antimalware,Threat...) , can I send alert message to Administrator via mail messages.. İs there any way for this??

I have configured e-mail server settings from:

Manage-> E-mail server settings->Configure Settings section. I can send test mail but how can I entegrate this with the blades which I want?

Thanks...

Re: Endpoint Alert Message

PhoneBoy — Tue, 13 Mar 2018 23:26:40 GMT

You can create custom alerts in SmartEvent based on whatever criteria you want.

Create a custom Event Definition that specifies the Blades/Actions you are most concerned with.

You will then set an Automatic Reaction for that event to email you.

See: Logging and Monitoring R80.10 Administration Guide

Re: Endpoint Alert Message

Sukru_isik — Fri, 16 Mar 2018 08:23:45 GMT

I have checkpoint Endpoint Policy Management Server(not security gateway) with versio R77.30.03 and my clients using endpoint security agent with version E80.80.

I can see some data in overview, events,timelines,charts tab..

When I create custom report , there is no data seeming. What the reason can be??

I want to know, can I create custom report for endpoint blades (Anti-Malware,AntiBot,Threat Prevention)?

Re: Endpoint Alert Message

PhoneBoy — Fri, 16 Mar 2018 14:53:39 GMT

In the default Threat Prevention report (possibly others), Endpoint logs are excluded.

You just need to remove that from the View Filter.