Does MWG 7.3 has the capability to send automatic alerts via e-mail? for example user accessed a blocked website. can it send the alerts automatically to a specific receiver(E-mail add)?
Thanks in advance
The MWG does indeed have the ability to send alerts via email. It can do so for your example as well (but I highly doubt you want an email everytime someone gets blocked -- perhaps if they choose to notify you then you do want an email).
I would suggest reviewing the SiteReview ruleset in the Online Ruleset Library and other community discussions on the topic.
Thanks for the info.
Follow-up question how do I configure MWG to send e-mail alert to a specific receiver(e.g. Administrator) whenever a malicious site or malware has been blocked?
This is configured in the settings when you configure this rule.
The below screenshot is not what you are asking for, but an example of email settings:
I have a requirement to notify users via email when their web page was blocked. I have integrated it with the domain and the usernames are extracted properly. I tried using authentication.username property as the email string in the above settings you have shown and obviously that only sends the username without the @example.com part.
how can i achieve what I'm trying to do?
The user name is not an email address.
In order to get the user's email address you will need to query a resource (such as AD) via LDAP to get this information.
I can post a ruleset about this later.
See attached ruleset as well as screenshots. You can use this ruleset assuming you are using direct proxy authentication, otherwise it may require a little bit of modification.
You will obviously need to update the LDAP settings to correspond with your LDAP server. My LDAP server was an AD server.
The Email address will be stored in "User-Defined.Authenticaiton.User.EmailAddress" which you can reference in your AD rules.
Any AD user object should be able to facilitate, but that also depends on your environment. Active Directory user objects have read access to the directory and should all be able to run the query.