SMTP, proxy and other connections
Setting up SMTP, Proxy and other connections
Setting up SMTP server
SMTP server settings are specified to send, e.g., IntellAct notifications and automatically generated Insight reports by e-mail.
- Go to Administration | Servers | Mail, proxy and others.
- In the SMTP server settings area, in the Address “From” field, enter e-mail to send notifications from this address.
- Type an SMTP server name and port.
- Check the Use authentication box to enable authentication on accessing SMTP server.
- Define a user account.
- Select an authentication method.
- To check the entered information and test the connection, click Check.
- If the connection has been tested successfully, a success message appears.
- Click Save.
An e-mail will be sent to the specified e-mail address for testing purposes. The e-mail address is ready to use.
Setting up Proxy server
If you are using a proxy server, specify the connection information.
- Go to Administration | Servers | Mail, proxy and others.
- In the Proxy server settings area, enable Connect through proxy server.
- Enter a proxy server name and port.
- Enter a user name and password.
- Click Save.
Setting up Syslog server
You can send notifications to a defined Syslog server after enabling Syslog and entering the server data of the Syslog server. All information types except the EgoSecure Server revision are sent directly from the EgoSecure Agent to Syslog server. The revision data is sent directly from the EgoSecure Server to Syslog.
Enabling Syslog
- Open the EgoSecure application AdminTool.exe.
- Enable the Write EgoSecure Server Syslog check box.
- Click Yes to confirm the message about a server restart and close AdminTool.
- In the Console, go to Administration | Clients | Client settings.
- In the EgoSecure event log option group, enable the Write EgoSecure events into Syslog option and click Save.
- Make sure that the option is not disabled for a computer under Computer management | Settings | Client settings.
Setting up Syslog server
- Go to Administration | Servers | Mail, proxy and others.
- In the Syslog server settings area, define a server name (or its IP-address).
- Enter a port (default: 514).
- Select a protocol type.
- Click Save.
Information sent to Syslog
Not all info is sent to Syslog. The available information types are listed below in the table. The Host name column identifies the Server IP that sends information to syslog; in the Date and Time columns you can see the time of sending info to Syslog. All information types except Reports | General | Revision are sent directly from the EgoSecure Agent to Syslog server. Revision data is sent directly from the EgoSecure Server to Syslog.
| Info colllected for Syslog | Info displayed in Syslog (Message colmn) |
|---|---|
|
Reports | General | Revision |
Information from all columns (including data that is displayed when clicking the Details link) of the Console report is gathered in the Message column. |
|
Reports | Audit group |
|
|
Reports | EgoSecure Antivirus | Threat found |
|
|
Info about EgoSecure Server service start or stop |
Server started/stopped. |
|
Info about EgoSecure Agent connection to Server and about Agent service start and stop |
When Agent connects, port and IP of the Server where Agent is connected are displayed. |
|
Agent logon details |
|
Setting up SNMP server
Specify an SNMP server to send notifications about IntellAct actions to the SNMP server. For details, see: IntellAct Automation
- Go to Administration | Servers | Mail, proxy and others.
- In the SNMP server settings, enter the name and port of the SNMP server.
- Click Save.
Configuring Macmon NAC (Network Access Control)
Network Access Control (NAC) verifies that the end devices in the network meet the specified security criteria. If you use the NAC software Macmon Network Access Control, you can specify the connection information for the Macmon server and specify the circumstances on the Client to send a notification to Macmon.
Configuring NAC
- Go to Administration | NAC | NAC settings.
- Enable the network control.
- NAC is now enabled.
- Enable the options with EgoSecure products. If the defined options are not enabled on end devices, these devices are considered insecure and a message is sent to Macmon.
- In the Users to exclude from security state check area, add users, who will not be checked for inactive Removable Device Encryption, Local Folder Encryption, Access Control and Application Control during NAC checks:
- Click Add.
- The Selection of users dialog appears.
- Select the users.
- Click OK to close the dialog.
- Selected users are added to the list.
- Click Save.
Setting up Macmon server
- Go to Administration | NAC | Macmon settings.
- Check the Activate Macmon box.
- Fill in the Server field (IP address, or host name of macmon server)
- Enter user name and password.
- Click Save.
Setting up Matrix42 Workspace Management Server
Matrix42 Workspace Management server is set up to receive information about IntellAct events via this server and undertake additional measures provided in the Matrix42 system. For details, see: Setting up IntellAct Automation to trigger Matrix42 Workspace Management workflows