Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 2715 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint email alerts

cumbrianblues

can you change the email address that the endpoint clients send email alerts from?

at the moment they come from sav@<machinename>.<domain>

these alerts are then forward to our helpdesk to log a call, the problem being that each new alert creates a new contact within the helpdesk - we just want one contact within the helpdesk for the all the alerts as the machine info is contained within the email anyway.

We would like the alert to come from a specific adress such as sophosalerts@<domain> is this possible?

:24065


This thread was automatically locked due to age.
  • 0

    Hello cumbrianblues ,

    AFAIK the From: is built-in and fixed. Your helpdesk software creates the contact from this field - no alternatives? I assume by forward you mean that the helpdesk is set as recipient in the policy (note that you can set both the Sender: and Return-Path: fields)?

    The only other option I can think of would be a small gateway (like DeleGate) which does the necessary rewrite.

    Christian

    :24103
  • 0

    If it's hardcoded, you'll have better luck contacting sophos support or your sales rep and fill out a feature request.

    They take these in various levels of seriousness so your milage may vary.

    :24145
  • 0

    Hi,

    I had a quick search in machine.xml ("\ProgramData\Sophos\Sophos Anti-Virus\Config" ) for SMTP and found the right section:

    <notification>
		<consumers>
			<smtpConsumer>
				<settings><server>
						<authentication/>
						<name>127.0.0.1</name></server>
					<sender>sav@end.point</sender>
					<replyTo></replyTo>
					<from>test@a.com</from>

    Addind the "from" tag does work, i.e.. Stop the SAVService, update the XML and restart the service.

    So it's not hardcoded as such, there just isn't a GUI on it and using SAVConf.xml to try and get it to the client doesn't seem to work although you could check this with Support. This doesn't really help much as I wouldn't recommend trying to update the XML on multiple machines.  Maybe on one machine.  The good news, is, at least the software has the capability, so maybe a feature request might go through quicker.

    Regards,

    Jak

    :24149
  • 0

    Jak mentiond:

    machine.xml

    Modifications won't survive an update - it is reset whenever SAVXP is installed by AutoUpdate (at least that's what I've observed). Also made a few attempts with savconf.xml (:smileywink:) and failed. It's not as straight forward as one would assume. Looks like it could be configurable, if it has already been implemented the required xml isn't obvious.

    BTW: A similar argument applies to the QM user rights which have recently been mentioned in Virus Cleanup and User with no administrator privilege . 

    Christian

    :24181