Event

Configuring Event Notifications

Configure TMSP to send notifications when certain events occur. These events usually require user intervention.

Notification recipients receive notifications through email. Configure the recipient list in the Contact List screen ( see Managing the Contact List) and the email delivery settings in the Notification Settings screen (see Configuring Notification Settings).

To configure event notifications:

  1. Click Configure under the Notifications column.

  2. Select the notification recipients for the following events:

    Events that trigger notifications

    Event

    Description

    Recommended Action

    Recommended Recipients

    Outbreak Containment Services triggered

    Outbreak Containment Services in Threat Discovery Appliance blocked and disconnected malware activities that have the potential of causing an outbreak.

    TMSP uses malware mapping settings to determine the malware name reflected in the notification. For details about malware mapping, see Updating Malware Mapping Settings.

    Investigate if malware activities have been halted. If the malware is actually harmless, a recipient can delete the malware name entry from the Malware Mapping Settings screen.

    Administrators for TMSP and Threat Discovery Appliance

    Threat sample ready

    Threat Mitigator uploaded a .zip file containing forensic data to TMSP.

    Send the .zip file to Trend Micro for analysis. For details, see Downloading Forensic Data.

    TMSP administrator

    Registered product and services expiration

    Renew the license or the subscription immediately.

    Administrators for TMSP and registered products

    No heartbeat received from registered product

    TMSP detects that a registered product has not sent a heartbeat message within a time interval.

    Configure the time interval in Administration > Network Interface Settings. For details, see Configuring Network Interface Settings.

    Ensure that the registered product can connect to the network.

     

    Administrators for TMSP and registered products

    Too many/
    Too few incidents

    There are too many or too few threat incidents.

    Configure the number of incidents in Administration > Notification Settings. For details, see Configuring Notification Settings.

    The notification for this event is only sent once. When TMSP sends the first notification, it will not send notifications even if the threshold is met.

    Check if the threat detection settings in Threat Discovery Appliance is working properly.

    Administrators for TMSP and registered products

  3. Click Save.