Modified e-mail alerts by policy?

Discussion in 'ESET NOD32 Antivirus' started by ThatITGuy, Nov 19, 2010.

Thread Status:
Not open for further replies.
  1. ThatITGuy

    ThatITGuy Registered Member

    Joined:
    Nov 19, 2010
    Posts:
    3
    Location:
    Vancouver, BC
    Hello,

    I'm looking for a way to modify which alerts are sent to the administrator from NOD32 AV 4.2.64 based on policies. I've applied the epfwwfpr.sys fix to my Windows 2008 R2 servers, and now every few hours I get an e-mail alert regarding the firewall being disabled on these machines. Does anyone know of a way to customize which alerts are sent, I have a separate policy for the Windows 2008 machines and I would like to apply that filter to that particular policy. Anyone know how to do this?
     
  2. MattJN

    MattJN Former ESET Support Rep

    Joined:
    Feb 19, 2010
    Posts:
    149
    Hello,

    With the policy, you can change the "Minimum Verbosity for Notifications" to whatever level you'd like. That setting is located under "Eset Smart Security, Eset NOD32 Antivirus > Eset Kernel > Setup > Alerts and Notifications > Minimum Verbosity for Notifications". By default it is set to Warnings, but you can restrict it to show only critical errors. This, however, will likely still generate emails saying the module(s) failed to initialize.

    What alerts are you hoping to get from the EMSX client?

    Is it possible to use the notification manager in RA for this purpose?

    There is functionality built into the 4.3 EMSX client (currently in beta) that will enable you to toggle the web access protection driver through the GUI, but since the product is beta, you likely don't want to install it on a production machine.

    Regards,

    Matt
    Eset
     
  3. ThatITGuy

    ThatITGuy Registered Member

    Joined:
    Nov 19, 2010
    Posts:
    3
    Location:
    Vancouver, BC
    Hi Matt,

    I don't really want to drop the verbosity of the logs, I did play with those settings for which types of alerts I want. What I want to be able to do, though it doesn't seem like you can, is take a specific alert and turn it off. Specifically the firewall alert. I have as directed by support turned off a feature on two of my servers and now every few hours I get an alert e-mail from those systems that warns that the firewall is not running properly. I just want to turn off that specific alert.

    Do you know of any way to do that, or will I have to wait for the next major version release?

    Thanks,

    Justin
     
  4. tony_m

    tony_m Eset Staff Account

    Joined:
    Nov 22, 2010
    Posts:
    239
    Hi Justin,

    This is currently not possible without lowering the verbosity of records.

    As Matt stated previously, another option is to play together with Notification Manager in ERA.
     
Thread Status:
Not open for further replies.