SmartEvent email notifications

[#1]

I need to configure email notification when critical event is appeared in logs. An email alert must send to administrator mail box when certain IPS protection is appeared in logs. I configuring SmartEvent for this task. An email alert is added in "Objects" -> "Automatic Reactions". Now i configured an alert for certain Firewall blade log (when someone tryng to get access to port 443 of certain IP external IP address, screenshot in attach) and this alert is working.
I configured an alert for Action: Detect (IPS blade) but there is no result (screenshot in attach).

There is default entry in "Global Exclusions" (screenshot in attach).
When this record is disabled, notifications about different events that I do not need are sends to my email address.

[#2]

I need to configure email notification when critical event is appeared in logs. An email alert must send to administrator mail box when certain IPS protection is appeared in logs. I configuring SmartEvent for this task. An email alert is added in "Objects" -> "Automatic Reactions". Now i configured an alert for certain Firewall blade log (when someone tryng to get access to port 443 of certain IP external IP address, screenshot in attach) and this alert is working.
I configured an alert for Action: Detect (IPS blade) but there is no result (screenshot in attach).

There is default entry in "Global Exclusions" (screenshot in attach).
When this record is disabled, notifications about different events that I do not need are sends to my email address.

[#3]

I need to configure email notification when critical event is appeared in logs. An email alert must send to administrator mail box when certain IPS protection is appeared in logs. I configuring SmartEvent for this task. An email alert is added in "Objects" -> "Automatic Reactions". Now i configured an alert for certain Firewall blade log (when someone tryng to get access to port 443 of certain IP external IP address, screenshot in attach) and this alert is working.
I configured an alert for Action: Detect (IPS blade) but there is no result (screenshot in attach).

There is default entry in "Global Exclusions" (screenshot in attach).
When this record is disabled, notifications about different events that I do not need are sends to my email address.

[Alexander_Lario]

Thank you for your answer.

Smart Event 80.10 jumbo hotfix Take 70 

Security Management Server 80.10 jumbo hotfix Take 42.

Yes, i install policy on Smart Event after make changes.

Yes, i returned default exclusions to the initial state.

[Alexander_Lario]

Thank you for your answer.

Smart Event 80.10 jumbo hotfix Take 70 

Security Management Server 80.10 jumbo hotfix Take 42.

Yes, i install policy on Smart Event after make changes.

Yes, i returned default exclusions to the initial state.

[PhoneBoy]

Can you show a log or two that should have matched this?

(Feel free to mask sensitive data)

[PhoneBoy]

Can you show a log or two that should have matched this?

(Feel free to mask sensitive data)

[Alexander_Lario]

Example notificatinon:

[Alexander_Lario]

Example notificatinon:

[PhoneBoy]

I recommend having TAC take a look at this, because that should catch it.

Contact Support | Check Point Software 

[PhoneBoy]

I recommend having TAC take a look at this, because that should catch it.

Contact Support | Check Point Software 

[Hugo_vd_Kooij]

2 things I would like to add here.

1. Make sure you use the latest Jumbo Hotfix for Smart Event. There is so much more fixed that is not explicitly listed in the fix list. (I had too many TAC cases on SmartEvent 😉
2. Be aware that if email delivery becomes a problem it will result in some additional issues on SmartEvent. So make sure you don't have a spam filter getting in the way. (Valueable lesson from said TAC cases.)

[Hugo_vd_Kooij]

2 things I would like to add here.

1. Make sure you use the latest Jumbo Hotfix for Smart Event. There is so much more fixed that is not explicitly listed in the fix list. (I had too many TAC cases on SmartEvent 😉
2. Be aware that if email delivery becomes a problem it will result in some additional issues on SmartEvent. So make sure you don't have a spam filter getting in the way. (Valueable lesson from said TAC cases.)