First, thank you for you interest in ePO-MVT. Please do not hesitate in letting what you think about it as well as any possible recommendation.
Regarding you question about setting up the automatic notification for ePO-MVT, we are clarifying the steps and will contact you shortly. We will also update the documentation accordingly.
ePO-MVT Automatic response only works with "Threat" Event types. Hence, when selecting Server or Client event types, may cause some confusion.
We will be updating the documentation to reflect the following change: "4. Select the Event group as ePO Notification events and the Event type "Threat" that trigger this response."
Moreover, when Event type is "Threat", on the Filter page "SUPPMVT1000" will be listed under "Detecting Product" for ePO-MVT. However, before SUPPMVT1000 can be seen in the detecting product list, events must be sent first from the nodes back to the ePO server. Only then, EPO will detect the products and will appear in the detecting products list. We will also update the documentation to reflect this change.
Thanks very much for the help!