How to Configure Symantec Endpoint Protection Manager to Send Email Alerts

Products

• Endpoint Protection

Issue/Introduction

How do I set up Symantec Endpoint Protection Manager (SEPM) to send security alerts to an email address?

Cause

You wish to receive notifications via email whenever there is a security event.

Resolution

Note: The email server settings are configured during installation of SEPM which is used for sending emails for sending notifications, password reset email etc.
It can be verified/edited as per Server Properties: Email Server

Reference steps:

1. Login to SEPM.
2. Click the Admin button.
3. Click the Servers panel.
4. Select the Management Server for which you wish to configure the email server and click on Edit the Server Properties under Tasks.   
5. Click on the Email Server tab.
6. Enter the Server Address, which would be an IP address, host name, or domain name of the email server.
7. Enter the Port Number for the email server that sends the notifications.
8. Enter the User name of the account on the email server. If you want to configure administrator email notifications, you should use the format user@domain in this text box. If the text box is left blank, SYSTEM@computer name sends the notifications.
9. Enter a Password of the account on the email server. This field is mandatory if the email server requires authentication.

To configure the SEPM to send alerts to an email address for required event:

1. Click on Monitors button on SEPM.
2. Click on Notifications tab.
3. Click on Additional Settings.
4. Select the Notification type from the drop down menu. For example - New risk detected, Virus definitions out-of-date, Risk outbreak, etc.
5. You may set the number of entries in each log under Limit option.
6. Save the filter by clicking on Save Filter and give it a desired name.
7. Click on Notification Conditions for that saved filter.
8. Click on Add and select the desired filter from the list.
9. You may select the Domain/Server/Group/Computer to be monitored.
10. You may also select other filters like Risk severity, Scan Type, Action Taken.
11. At the bottom of this window, enter the Email Address to which you wish to receive the email alerts.

Note: You may enter multiple email addresses separated by commas. Please make sure that there are no spaces between the email addresses.