Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Does LEM generate a SMTP request on TCP 25 to the SMTP server each time a rule triggers and has email notification set?

$
0
0

 

I created simple rule. I would like the rule to send an email to me when it triggers.  I have configured the email Connector (Email Active Response) to communicate with our SMTP server via TCP Port 25.  As per standard practice, the SMTP servers sit in a DMZ.

 

While monitoring the LEM Console All Events Filter, I can see the following Event Name/EventInfo when the rule I created triggers:

 

Event Name                                      EventInfo

 

InternalCommands                          Successfully Completed Send Email Message Action

 

InternalCommands                          Initiated Action: Send Email Message

 

InternalRuleFired                            The “SendEmail” rule fired

 

Only once did I see the appropriate rule on the firewall increment. I have triggered the rule (SendEmail) MANY times.  So, does LEM generate a SMTP request on TCP 25 to the SMTP server each time a rule triggers and has email notification set?

 


Viewing all articles
Browse latest Browse all 5385

Trending Articles