Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 1 subscriber
  • Views 69484 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise Console Email Alerting not working

ryankurowski

I have enabled email alerting in my Anti-Virus and HIPS Policy but when a virus has been detected on a client I am not getting a email notification. The funny thing is I will get an email about scanning errors from the server that Sophos is installed on but that is it. Please if anyone has any insight into why I am not receiving emails then please reply to my post.

Ryan

:5642


This thread was automatically locked due to age.
Parents
  • 0

    No problem, Spilios .

    Now it's not too hard to give Wireshark a try. Before installing it you could perform the basic check on a client using the Sophos GUI. Configure anti-virus and HIPS -> Alerting/Messaging -> tab Email alerting, button Configure SMTP ... and button Test  - but it only connects to the server, waits for the greeting and then QUITs (BTW: The 'sender' address is only used for the envelope (the SMTP MAIL FROM) but not the mail header). If the test is ok install and run Wireshark (use port 25 as capture filter) and trigger an event (use the EICAR testfile or savtst32.exe from the \sec_4x\tools folder). Wireshark should capture the attempt to send the mail.

    Christian

    :13911
Reply
  • 0

    No problem, Spilios .

    Now it's not too hard to give Wireshark a try. Before installing it you could perform the basic check on a client using the Sophos GUI. Configure anti-virus and HIPS -> Alerting/Messaging -> tab Email alerting, button Configure SMTP ... and button Test  - but it only connects to the server, waits for the greeting and then QUITs (BTW: The 'sender' address is only used for the envelope (the SMTP MAIL FROM) but not the mail header). If the test is ok install and run Wireshark (use port 25 as capture filter) and trigger an event (use the EICAR testfile or savtst32.exe from the \sec_4x\tools folder). Wireshark should capture the attempt to send the mail.

    Christian

    :13911
Children
No Data