Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 13 replies
  • Subscribers 1 subscriber
  • Views 69483 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise Console Email Alerting not working

ryankurowski

I have enabled email alerting in my Anti-Virus and HIPS Policy but when a virus has been detected on a client I am not getting a email notification. The funny thing is I will get an email about scanning errors from the server that Sophos is installed on but that is it. Please if anyone has any insight into why I am not receiving emails then please reply to my post.

Ryan

:5642


This thread was automatically locked due to age.
  • 0

    Hi Christian

    All the clients have the Enable email alerting box checked along with the Virus/Spyware detection and cleanup box. This is the only alert I really need, but I did early on in my testing enable all message types with the same results. I have put in 3 different email addresses, all valid and tested on our SMTP email server via telneting to port 25 from a client.

    Matt

    :18741
  • 0

    Hello Matt,

    didn't expect it'd be that simple but it's always a good idea to rule out silly mistakes. So you get the alert in SEC, the alert is also sent to the Event Log (as ID 32) but email doesn't seem to get triggered, right? And it is also a general problem (i.e. all clients show the same behaviour)?

    Guess it's time to have Support take a look. Sorry I couldn't be of more help.

    Christian

    :18745
  • 0

    Hi,

    So the client, specifically SAVService.exe is unable to sent emails?

    I think SAV uses CDO (cdosys.dll) to send emails.  That being the case, on your clients does the following VBScript work:

    set objCDOMessage=createobject("CDO.Message") 
objCDOMessage.Subject="CDO Test" 
objCDOMessage.From="from@local.test" 
objCDOMessage.To="to@local.test" 
objCDOMessage.TextBody="Body"
objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/sendusing")=2 
objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserver")="127.0.0.1"
objCDOMessage.Configuration.Fields.Item("http://schemas.microsoft.com/cdo/configuration/smtpserverport")=25 
objCDOMessage.Configuration.Fields.Update
objCDOMessage.Send

    You'll need to copy the above into a file called "CDO.vbs" for example, then change 127.0.0.1 to the address of your SMTP server and update the email addresses for your domain.  

    If you get a message about being unable to create an object, I would suggest running:
    regsvr32 C:\windows\system32\cdosys.dll

    If it succeeds then try the script again. If that works I would expect SAV to.

    Regards,

    Jak

    :18757