Notification settings for message scan events
July 3, 2024
ID 91242
You can configure delivery of email notifications about message scanning events for one or several rules.
This option is available if forwarding of notifications is enabled in the general settings for email notifications.
You can configure delivery of email notifications to recipients from the general list, sender, recipient of messages or to other recipients about the following message scan events:
- Malicious objects detected.
- Encrypted objects detected.
- Anti-Virus scan errors detected.
- Content Filtering issues detected.
- Phishing messages detected.
- A macro detected in the attachment.
- Malicious links detected.
- If an object detected by KATA.
You can configure notifications about KATA alerts only if integration with Kaspersky Anti Targeted Attack Platform is enabled.
To configure notifications about message scanning events:
- In the application web interface window, select the Rules section.
- In the rule table, select the rule for which you want to configure notifications about scanning events.
This opens the View rule window.
- Click Edit.
Rule settings become editable.
- In the left pane, select the Notifications section.
- In the group of settings with the name of the selected event (for example, Malicious objects detected), select the check boxes next to the names of settings:
- Notify recipients from the general list if you want notifications about the selected event to be sent to addresses from the general list.
If the check box is selected, you need to define the list of addresses in the general email notification settings after clicking the Specify link.
- Notify sender if you want notifications about the selected event to be sent to message sender addresses.
- Notify recipient if you want notifications about the selected event to be sent to message recipient addresses.
- Additional addresses if you want notifications about the selected event to be sent to additional email addresses.
- Notify recipients from the general list if you want notifications about the selected event to be sent to addresses from the general list.
- If you have configured notifications to be sent to message recipient addresses, select one of the following options:
- Notify only if you want the notification to be sent without the original message.
- Notify with source message in attachment if you want the notification to be sent with the original message in an attachment.
- If you have configured notifications to be sent to additional email addresses, type an address in the text box and press Enter.
The email addresses are entered one at a time. Repeat the process of adding addresses to the list for all email addresses that you are adding.
- If necessary, click the Customize notification templates link in the upper-right corner of the window and edit the notification templates.
- Click Save.
Notifications about message scanning events are configured.
To ensure the configured settings are applied during the operation of Kaspersky Secure Mail Gateway, make sure to enable the configured rule.