Defining the general notification settings

To define the notification sending settings, perform the following steps:

1. Perform the following steps in the Management Console tree:
   • To configure notification delivery for an unassigned Security Server, select the node of the relevant Security Server.
   • To configure notification delivery for Security Servers belonging to a profile, expand the Profiles node and select the node of the profile for whose Security Servers you want to configure notification delivery.
2. Select the Notifications node.

   The workspace displays the Notification delivery settings and Event notifications sections.

3. In the block Notification delivery settings specify the settings for sending notifications via the EWS and SMTP protocols.

   Be sure to use only secure TLS ciphers when using EWS and SMTP. List of secure TLS cipher suites. For instructions on how to configure TLS cipher suites, please refer to this article on the Microsoft website.

   List of secure cipher suites for TLS 1.2:

   • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 = {0xC0, 0x30} — see RFC 5289
   • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = {0xC0, 0x2F} — see RFC 5289
   • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = {0xC0, 0x2B} — see RFC 5289
   • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 = {0xC0, 0x2C} — see RFC 5289
   • TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 = {0xCC, 0xA8} — see RFC 7905
   • TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 = {0xCC, 0xAA} — see RFC 7905
   • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 = {0x00, 0x9F} — see RFC 5288

   List of secure cipher suites for TLS 1.3:

   • TLS_AES_128_GCM_SHA256 = {0x13, 0x01} — see RFC 8446
   • TLS_AES_256_GCM_SHA384 = {0x13, 0x02} — see RFC 8446
   • TLS_CHACHA20_POLY1305_SHA256 = {0x13, 0x03} — see RFC 8446
   • TLS_AES_128_CCM_SHA256 = {0x13, 0x04} — see RFC 8446
4. Click the OK button.

If the application is running in a configuration with a DAG of Microsoft Exchange servers, the notification settings specified on any of the servers will be automatically applied to all the servers in the DAG. You do not have to configure notification delivery on other servers in the DAG.