Email after policy install

[hurgh]

Hi All,

We have a checkpoint cluster, and a long time ago, it was setup to email when a policy is installed. I want to change who the email goes to, but I can not for the life of me find where to set this.

We have Eventia Reporter, and that sends emails also, I have changed the address in Eventia reporter, but that only seems to change the emails that Eventia reporter sends (no surprise there).

Can anyone please give me a few places to look etc. I have checked the Global Policies and a few other places, but can not see where the email address has been entered.

Thank for any help.

Regards

-Hurgh-

[RayPesek]

Global Policy - Logs and Alerting. There's a place to set the mail script and you'll find it in that command. SmartView Monitor is what's tripping the email, but the address is set in the Global Policy.

Ray

[hurgh]

Hi Ray,

Thanks for the reply.

I did have a look in that area but can not find any relation to an email address, or where I can change it.

I have attached two screen shots that show my settings under Global Properties.

Anyone else with ideas?

Thanks

-Hurgh-

[anakalem]

Hi

first you have to define the mail alert script under global properties

for example:

internal_sendmail -s '<email alert subject>' -t <ip of email server> -f <sender> <email_addressdestination1 email_addressdestination2>

and trigger it in the smartview monitor

thanks

kalem

[longhill]

internal_sendmail -s '<email alert subject>' -t <ip of email server> -f <sender> <email_addressdestination1 email_addressdestination2>

What is sender?
The name or IP of my management?

Thanks

[RayPesek]

-f = "from" as in the email address that you want to show as From:

I don't think you can have multiple recipients, can you? I've never been able to get it to work.

Ray

[longhill]

I have insert:
internal_sendmail -s '<Allert Check Point>' -t <217.***.***.184> -f <sender> recipient_email <bob@test.**>
where 217.***.***.184 is the IP of mail server that must receive email allert message.

Don't send allert message!
Where is the errors?
Under "Global Propierties--->Log and Allert--->Allert Command" must I check also "Send Mail Allert to SmartView Monitor"?

[anakalem]

Originally Posted by longhill

I have insert:
internal_sendmail -s '<Allert Check Point>' -t <217.***.***.184> -f <sender> recipient_email <bob@test.**>
where 217.***.***.184 is the IP of mail server that must receive email allert message.

Don't send allert message!
Where is the errors?
Under "Global Propierties--->Log and Allert--->Allert Command" must I check also "Send Mail Allert to SmartView Monitor"?

Hi
Dont use the "<" and ">", it is only to differentiate the chunks of my example. Below my example:
internal_sendmail -s 'SmartCenter Email Alert' -t 202.111.222.212 -f admin@SmartCenter fwadmin@company.com

where 202.111.222.212 is the email server that smart center will sent to
admin@SmartCenter is the email address that will be appear in the "from" field
fwadmin@company.com is the destination email address
Multiple recipient also working

Thank you

kalem