Smartevent email

[LazarusG]

Hi

I need to send emails based on  certain log conditions and this seems to me to be the exact use case of Smartevent.

I have proven we can receive emails by creating an automatic reaction specifying the SMTP relay on policy push.

So it seems it is not necessary to do anything to sendmail in global properties or add mail servers in gaia.

But I can find zero evidence in messages/postfix file or any log file in the ATRG to prove that the mail was sent.

Does anyone know what service is responsible for this and if there is a log file event to prove a mail was sent?

Thanks!

[the_rock]

Did you try configure like what I attached?

Andy

[LazarusG]

Hi

Yes.

The issue is I can prove emails are sent if Im watching in real time with a packet capture and the customer receives the email. But then they say they don't receive the emails for some matching conditions. But there is nothing on the system I can find to demonstrate the we attempted to do anything.

Does anyone know of a way to verify in a log file that an email was sent?

Thanks

[Amir_Senn]

You can add yourself as an email recipient for a while to verify.

[LazarusG]

thanks - that was a good idea - i can receive emails - but i still cant prove from the appliance that it happened and it seems it doesnt happen in every case. Is Smartevent considered legacy?

[Amir_Senn]

It's not considered legacy AFAIK but we do have quite the new feature called "Infinity Playblocks" which is new and might be useful for same scenarios:
https://www.checkpoint.com/infinity/playblocks/