- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Email alert
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Email alert
I want receive alerts to email from checkpoint about critical event. For examle: my IPS detect critical event and i receive message by email.
how can i do it?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SmartEvent has an Automatic Reaction where it can email you. IPS Critical events should be a predefined query, but if not, one could be created. Then enable the Automatic Reaction to Email you.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How can i configure notification for threat emulation?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You will need to create a query within SmartEvent with the keyword of "Malicious" from the verdict field and then set your Automatic Reaction. Something like the following should do the trick.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Look into "Successive events" in IPS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We have had this question the last year, please look here: https://community.checkpoint.com/thread/7389-mail-alert-and-logging-for-ips-protection
