1 Reply Latest reply on May 11, 2011 12:25 AM by David!

    Is it possible to create a query to report on port 25 blocks?

    DarrenFord

      Hi All...

       

      I am just trying to figure out if it is possible to create a query which when run will report on port 25 smtp blocks detected by access protection on machines?

       

      Any assistance will be greatly appreciated.

       

       

      ePO 4.5

       

      Thanks

      Regards

      Darren

        • 1. Re: Is it possible to create a query to report on port 25 blocks?

          Indeed there is.

           

          Create a query for threat events

           

          I use Single Group Summary Table

           

          Labels are:  Threat Target Host Name

          Values are: Number of Threat Events

           

          Whatever columns you deem necessary

           

          Filter:

          Threat name.  Contains:  Prevent mass mailing worms from sending mail

          and Event ID.  Equals: 1094

           

           

           

          Useful to find servers trying to do SMTP stuff that may need to have a policy applied to allow this.