Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
LazarusG
Collaborator
Collaborator

Smartevent email

Hi

I need to send emails based on  certain log conditions and this seems to me to be the exact use case of Smartevent.

I have proven we can receive emails by creating an automatic reaction specifying the SMTP relay on policy push.

So it seems it is not necessary to do anything to sendmail in global properties or add mail servers in gaia.

But I can find zero evidence in messages/postfix file or any log file in the ATRG to prove that the mail was sent.

Does anyone know what service is responsible for this and if there is a log file event to prove a mail was sent?

Thanks!

0 Kudos
5 Replies
the_rock
MVP Gold
MVP Gold

Did you try configure like what I attached?

Andy

0 Kudos
LazarusG
Collaborator
Collaborator

Hi

Yes.

The issue is I can prove emails are sent if Im watching in real time with a packet capture and the customer receives the email. But then they say they don't receive the emails for some matching conditions. But there is nothing on the system I can find to demonstrate the we attempted to do anything.

Does anyone know of a way to verify in a log file that an email was sent?

Thanks

0 Kudos
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

You can add yourself as an email recipient for a while to verify.

Kind regards, Amir Senn
0 Kudos
LazarusG
Collaborator
Collaborator

thanks - that was a good idea - i can receive emails - but i still cant prove from the appliance that it happened and it seems it doesnt happen in every case. Is Smartevent considered legacy?

0 Kudos
Amir_Senn
MVP Silver CHKP MVP Silver CHKP
MVP Silver CHKP

It's not considered legacy AFAIK but we do have quite the new feature called "Infinity Playblocks" which is new and might be useful for same scenarios:
https://www.checkpoint.com/infinity/playblocks/

 

Kind regards, Amir Senn

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events