Notification Contacts

minute timer starts. The device sends e-mail notifications until the threshold is reached. Any notifications received after the threshold is reached are blocked. After one minute, the device resumes sending email alerts. The device generates a message in the system log whenever email notifications are blocked.

CAUTION Short aggregation periods can significantly affect system performance. The shorter the aggregation period, the higher the system load. In the event of a flood attack, a short aggregation period can lead to system performance problems.

In addition to the user-configured aggregation period, the device also provides alert aggregation services to protect the device from over-active filters that can lower performance.

For details on configuring Notification Contacts, see the following topics:

•“Create an Email or SNMP Notification Contact” on page 53

•“Configure the Remote System Log Contact” on page 54

•“Configure the Management Console Contact” on page 54

•“Delete a Notification Contact” on page 54

Create an Email or SNMP Notification Contact

Note Before creating an Email or notification contact, you must to configure Email and SMTP server settings on the device from the Email Server page (System > Configuration > Email Server). For details, see “Email Server” on page 241.

STEP 1 From the LSM menu, select IPS > Action Sets. Then, choose the Notification Contacts tab.

STEP 2 On the Notification Contacts page, click the Add Contact button or select the pencil icon for the contact you want to edit.

STEP 3

STEP 4 STEP 5

STEP 6 STEP 7

Type Contact’s Name. This name is used to manage the contact information on the Notification Contacts page.

Enter the address where notifications will be sent in the To Email Address field.

Enter the Aggregation Period.

Longer aggregation periods improve system performance.

Click Create to save the changes.

Optionally, click the Test Email button.

If you click the button, the IPS attempts to send an email message, using the server defined in the default email settings, to the email contact you are creating.

If the email fails to send properly, check for the following possible causes:

•Is default email server configured? See “Email Server” on page 241.

•Email server must be reachable from the device. In the CLI use the PING command to see if you can reach email server IP.

•Email server may not allow mail relaying. Make sure you use account/domain that the email server accepts.

X Family LSM User’s Guide V 2.5.1

53