Not sure if this is the correct place for this so feel free to move
I'm looking at the Groupshield 7.0 event ID 8502 where a banned attachment is stripped from an email & am wondering if you can edit the content of the event generated ?
Basically our security people are looking for the original sender of the email as well as the machine dealing with the threat.
I can see the detail in the email sent to the intedended recipient but nowhere does it seem to get posted back to ePO.
Any Ideas ?
Are you saying the event itself does not get back to ePO? or are you wanting to edit the event?
I may be wrong but I don't believe that is possible to edit the event. The Point Products generate the Events and passthem on to ePO for processing.
With the old Alert Manger product you could edit the events and put in your own text.