Modified e-mail alerts by policy?

Hello,

I'm looking for a way to modify which alerts are sent to the administrator from NOD32 AV 4.2.64 based on policies. I've applied the epfwwfpr.sys fix to my Windows 2008 R2 servers, and now every few hours I get an e-mail alert regarding the firewall being disabled on these machines. Does anyone know of a way to customize which alerts are sent, I have a separate policy for the Windows 2008 machines and I would like to apply that filter to that particular policy. Anyone know how to do this?

 

Hello,

With the policy, you can change the "Minimum Verbosity for Notifications" to whatever level you'd like. That setting is located under "Eset Smart Security, Eset NOD32 Antivirus > Eset Kernel > Setup > Alerts and Notifications > Minimum Verbosity for Notifications". By default it is set to Warnings, but you can restrict it to show only critical errors. This, however, will likely still generate emails saying the module(s) failed to initialize.

What alerts are you hoping to get from the EMSX client?

Is it possible to use the notification manager in RA for this purpose?

There is functionality built into the 4.3 EMSX client (currently in beta) that will enable you to toggle the web access protection driver through the GUI, but since the product is beta, you likely don't want to install it on a production machine.

Regards,

Matt
Eset

 

Hi Matt,

I don't really want to drop the verbosity of the logs, I did play with those settings for which types of alerts I want. What I want to be able to do, though it doesn't seem like you can, is take a specific alert and turn it off. Specifically the firewall alert. I have as directed by support turned off a feature on two of my servers and now every few hours I get an alert e-mail from those systems that warns that the firewall is not running properly. I just want to turn off that specific alert.

Do you know of any way to do that, or will I have to wait for the next major version release?

Thanks,

Justin

 

Hi Justin,

This is currently not possible without lowering the verbosity of records.

As Matt stated previously, another option is to play together with Notification Manager in ERA.