How to Configure Symantec Endpoint Protection Manager to Send Email Alerts

Products

• Endpoint Protection

Issue/Introduction

How do I set up Symantec Endpoint Protection Manager to send security alerts to my email address?
 

Cause

You wish to receive notifications via email whenever there is a security event.

Resolution

Note: You must configure a mail server in order to receive the email alerts.

Please follow the below steps in order to configure an email server :

1. Login to Symantec Endpoint Protection Manager.
2. Click the Admin button.
3. Click the Servers panel.
4. Select the Management Server for which you wish to configure the email server and go to Tasks -> Edit Server Properties.
5. Click on the Mail Server tab.
6. Enter the Server Address, which would be an IP address, host name, or domain name of the email server.
7. Enter the Port Number for the email server that sends the notifications.
8. Enter the User name of the account on the email server. If you want to configure administrator email notifications, you should use the format user@domain in this text box. If the text box is left blank, SYSTEM@computer name sends the notifications.
9. Enter a Password of the account on the email server. This field is mandatory if the email server requires authentication.

To configure the Symantec Endpoint Protection Manager to send alerts to an email address, please follow the below steps:

1. Login to Symantec Endpoint Protection Manager.
2. Click on Monitors button.
3. Click on Notifications tab.
4. Click on Advanced Settings ("Additional Settings").
5. Select the Notification type from the drop down menu. For example - New risk detected, Virus definitions out-of-date, Risk outbreak, etc.
6. You may set the number of entries in each log under Limit option.
7. Save the filter by clicking on Save Filter and give it a desired name.
8. Click on Notification Conditions for that saved filter.
9. Click on Add and select the desired filter from the list.
10. You may select the Domain/Server/Group/Computer to be monitored.
11. You may also select other filters like Risk severity, Scan Type, Action Taken.
12. At the bottom of this window, enter the Email Address to which you wish to receive the email alerts.

Note: You may enter multiple email addresses separated by commas. Please make sure that there are no spaces between the email addresses.