cancel
Showing results for 
Search instead for 
Did you mean: 
shocko
Level 9
Report Inappropriate Content
Message 1 of 4

AP Report on actions blocked at agents

Guys, in ePO 5 is it possible to create reports/alerts listing the actions that have been blocked by the AP agent at clients? I recently had a lot of scripts being blocked because they send mails and it wasted a good deal of time trying to figure out why they stopped working

3 Replies

Re: AP Report on actions blocked at agents

Hi

You can generate Reports, queries and Actions based on the Threat Events information. Are you specifically looking for alerts (Automatic Responses) when the Mass Mail Rule is triggered, ie something is trying to use port 25 such as your scripts sending an email or all Access Protection Rules?

HTH

Regards

Rich

Volunteer Moderator

Certified McAfee Product Specialist - ePO

Re: AP Report on actions blocked at agents

Yes, you can do it through Automatic responses in ePO console, If you know event ID of specific events than use it in filter tab and make notification to your mailbox.

Re: AP Report on actions blocked at agents

If you don't know the event ID, a little trick for you, go to Menu>Configuration>Server Settings>Event Filters and use your browsers Search/Find feature to look for keywords such as "mass mail" and you will find the eventId and if it is included in your event filters. 


Regards

Rich

Volunteer Moderator

Certified McAFee Product Specialist - ePO