Hello I`m using McAfee ePolicy Orchestrator 4.0.0 (build 1083) and McAfee VirusScan Enterprise 8.5. And I have a problem with email notifications. I have configured a notification rule
SEB Protection Violation Alert Notes: Notification sends an e-mail message when protection violation is suspected.
Defined at: My Organization\SEB Servers Priority: High Status: Enabled Operating systems: Server
Products: Host Intrusion Prevention VirusScan
Categories: Access Protection rule violation detected and blocked Access Protection rule violation detected and blocked (threat) Application blocked Buffer Overflow detected and blocked Host intrusion detected and handled Network intrusion detected and handled Unwanted program detected and removed Virus detected (heuristic) and removed Virus detected and removed
Threat name: (Any) Aggregation: Send a notification for every event
Throttling: Notifications: my email
And it works. Partially. I receive E-mails regarding weekly scan events (and events described in other rules) - but no notifications arrive when OAS handles malware (logs show successful actions). I`ve tried to modify different settings - from removing suppression for all categories of messages to including all products and all categories into the rule desription. Nothing has worked. So I`d really appreciate any help.