cancel
Showing results for 
Search instead for 
Did you mean: 

Rogue System Sensor Email Alerts not showing information

Jump to solution

EPO Server 4.0 (Build 1333), RSD 2.0.0 (405) running on DHCP Servers.

When i have a RSS / RSD Rogue detection my email alerts look like this:

Time: 8/4/10 11:00:52 AM

Computer: Not Available - Not Available

Description: New Rogue System detected

Number of events: 1

Source computer IP addresses: Not Available

FileName: Not Available

Threat: Not Available

Product Families: ePO Server

DNS Name: Not Available

IP Address: Not Available

Netbios Name: Not Available

MAC Address: Not Available

Last Detect Time: Not Available

and in EPO I have the alert template like this:

Time: {TimeNotificationSent}

Computer: {AffectedComputerNames} - {AffectedComputerIPs}

Description: {EventDescriptions}

Number of events: {ReceivedNumEvents}

Source computer IP addresses: {SourceComputers}

FileName: {AffectedObjects}

Threat: {ReceivedThreatNames}

Product Families: {ReceivedProductFamilies}

DNS Name: {DnsName}
IP Address: {IPV4}
Netbios Name: {NetbiosName}
MAC Address: {MAC}
Last Detect Time: {setOfLastDetectedTime}

Anyone able to help me fix this? Id love to see some real information show up from these sensors.

Thanks

  Bill

Message was edited by: Alterac on 8/4/10 12:34:32 PM CDT
1 Solution

Accepted Solutions

Re: Rogue System Sensor Email Alerts not showing information

Jump to solution

Me thinks you are trying to set this up as a Notification Rule.

It needs to be setup in the Responses section (next tab over in the console).

Review the EPO doco, section "Setting up automatic responses to Rogue System Detection events".

Cheers,

M

Message was edited by: Mamba357 on 10/22/10 9:30:44 AM GMT-07:00
4 Replies

Re: Rogue System Sensor Email Alerts not showing information

Jump to solution

I just set mine up recently, body format looks like this, works fine.

System: {DnsName}
IP: {IPV4}
MAC: {MAC}
OS: {OSFamily}

Re: Rogue System Sensor Email Alerts not showing information

Jump to solution

Ive tried a few other things and still have had 0 luck getting those emails to be useful.

Would i need to re-check in some extensions or reporting modules or something possibly?

Re: Rogue System Sensor Email Alerts not showing information

Jump to solution

Me thinks you are trying to set this up as a Notification Rule.

It needs to be setup in the Responses section (next tab over in the console).

Review the EPO doco, section "Setting up automatic responses to Rogue System Detection events".

Cheers,

M

Message was edited by: Mamba357 on 10/22/10 9:30:44 AM GMT-07:00

Re: Rogue System Sensor Email Alerts not showing information

Jump to solution

that was the problem. Thanks!