[KB7840] Configure SMTP client threat notifications using ESET PROTECT On-Prem

• Configure your ESET product to automatically email administrators or other users when threats are detected in your network
• Configure server notifications
• Use a policy

You can use ESET PROTECT On-Prem to configure SMTP settings on client workstations so that threat or event notification emails are sent to a designated email address. You can also configure ESET endpoint settings to send SMTP messages from client workstations.

Prerequisites

Make sure SMTP Server is configured.

 Endpoint users: Perform these steps on individual client workstations

Configure SMTP threat notifications using server notifications

1. Open ESET PROTECT On-Prem in your web browser and log in.

2. Click Notifications, select the check box next to the notification you want to configure, and then click Actions → Edit.

   

3. Click the toggle under Enabled to enable it.

   

4. Click Distribution and type the email address you want this notification sent to into the Email Address field.

   Optional settings

   Click Basic and modify the name and description of the email notification.
   Click Configuration and modify the rules that trigger the notification.
   Click Distribution and modify the text of the email notification in the Message field.
   Click Advanced Settings - Throttling and further refine the volume and frequency of your notifications based on statistical and time-based triggers.

5. Click Finish. Repeat the steps above to configure the other Notifications listed in step 2.

   

    

Configure SMTP threat notifications using a policy

1. Open ESET PROTECT On-Prem in your web browser and log in.

2. Click Policies, select the policy, and then select the box next to the policy you want to set up SMTP threat notifications for. Click Actions → Edit.
   

   

3. Click Settings → Tools → Notifications.

1. Click the toggle next to Send event notifications by email.

2. Type your server address into the SMTP server field. If necessary, enter the username and password needed for authentication.

3. Type the email address you want notifications to be sent to in the Recipient address field; type the email address you want to be displayed as the sender in the Sender address field.

4. Select your desired verbosity level from the Minimum verbosity for notifications drop-down menu. Click here for more information about verbosity levels.

4. Click Message Format, and click the toggle next to Use default message format to disable it. You can modify the format of the SMTP threat notification emails generated in the Format of event messages and Format of threat warning messages fields.
   
   
5. Click Finish to save the policy.

All clients assigned to this policy will now send SMTP threat notifications to the email address (Recipient address) you specified in step 3.