Guys, in ePO 5 is it possible to create reports/alerts listing the actions that have been blocked by the AP agent at clients? I recently had a lot of scripts being blocked because they send mails and it wasted a good deal of time trying to figure out why they stopped working
You can generate Reports, queries and Actions based on the Threat Events information. Are you specifically looking for alerts (Automatic Responses) when the Mass Mail Rule is triggered, ie something is trying to use port 25 such as your scripts sending an email or all Access Protection Rules?
Certified McAfee Product Specialist - ePO
Yes, you can do it through Automatic responses in ePO console, If you know event ID of specific events than use it in filter tab and make notification to your mailbox.
If you don't know the event ID, a little trick for you, go to Menu>Configuration>Server Settings>Event Filters and use your browsers Search/Find feature to look for keywords such as "mass mail" and you will find the eventId and if it is included in your event filters.
Certified McAFee Product Specialist - ePO