Symantec Messaging Gateway (SMG): Incident Notification Variables Guide
Article ID: 441615
Updated On:
Products
Issue/Introduction
When configuring Content Incident notifications in SMG, administrator can use specific variables to populate information about the incident in the notification template.
This guide outlines how these notification variables behave and map to different incident types.
Resolution
1- %NEW_COMPLIANCE_MESSAGES%
This basic variable provides a high-level summary of the policy breach. It outputs a standard format indicating the incident ID and the specific policy that caught the message.
2- %NEW_COMPLIANCE_MESSAGES_DETAILED%
This variable provides a granular breakdown of the message metadata involved in the violation. It explicitly details fields such as the sender, recipient, subject line, and date/time stamps to help administrators or users identify the specific message.
3- Quarantine Remediation Variables:
- %NEW_COMPLIANCE_MESSAGES_REMEDIATION_AUTO_AUTHENTICATION%
- %NEW_COMPLIANCE_MESSAGES_REMEDIATION_REQUIRES_AUTHENTICATION%
These variables are designed strictly for quarantine incident notifications. They populate the notification with interactive administrative action links (such as View, Approve, or Reject), allowing authorized users or administrators to process the quarantined message directly from the email interface.
4- Informational Incident Variables
- %NEW_INFORMATIONAL_INCIDENT_MESSAGES_AUTO_AUTHENTICATION%
- %NEW_INFORMATIONAL_INCIDENT_MESSAGES_REQUIRES_AUTHENTICATION%
These variables are designed strictly for informational incident notifications (logging, tracking, or auditing purposes). Because informational incidents do not hold the message in a remediable state, these variables display message information without administrative action items like "Approve" or "Reject".
Feedback
