SMTP with TLS isn't working, and triggering events via syslog

[erez]

Hey! I was trying to configure the SMTP server, And I know that it works only on port 465 from our side, Currently, when trying to test the connection, it's failing, Is there any other way to check why this is not working? And another question, is there any way to trigger events via the syslog server that's configured? Thanks.

[cdinet]

Refer to https://kc.mcafee.com/agent/index?page=content&id=KB60405 - we can't use ssl with email server at this time in epo.

[erez]

Hey!

Thanks for your reply.

Is there a way then to trigger sending alerts through the registered syslog server?

Or any other way to send alerts?

Thanks.

[cdinet]

Syslog receives events that the agents send in, which automatic responses are also dependent on.  So if you have a syslog server that supports tls 1.2, it can receive events as they come in.  However, setting it up for alerts is another thing - that would depend on syslog capabilities.  Otherwise you can follow that KB and set up an smtp relay server to connect to the email server via tls.

[erez]

Hey, cdinet!

Regarding the Syslog server, it is currently working now and I'm getting events.

Can you explain what did you mean when saying "setting it up for alerts is another thing - that would depend on syslog capabilities"? 

Since we have lots of services that are working with this SMTP server, I won't set up another one only for the ePo, so I'm trying to find a workaround 🙂  

Thanks!

[rackroyd]

Hi,

I suspect the push of that reply was about the need to configure any syslog server accordingly to generate alerts. That's something we could not help with directly as it would be a function of the syslog server itself, if it were capable of that kind of operation.

Hth

[erez]

Hey @rackroyd,

I think that I didn't understand what exactly the Epo sends through the SMTP,

can you please explain? 

Thanks.

[rackroyd]

Hi,

Hope this helps...

The original request was about SMTPs (ie secure SMTP), which ePO cannot be configured for at all. So replies about that were basically 'can't be done, but you may look at syslog servers instead'

ePO can only send email on smtp, not smtp with TLS.

Kind Regards,

[erez]

Can you please elaborate on what kind of emails do I get from the EPO if configured with an SMTP server?

Thanks.

[cdinet]

Emails are only sent if a task or automatic response is configured to send an email.  Server tasks can be configured to run a report and email it to desired recipients and automatic responses can be used to send email when an event triggers the response.  The epo product guide describes those usages.