Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Help with LEM Filters and/or Alerts

$
0
0

The server is internal, and we have setup e-mail encryption.  If we put the keyword  in the subject line it’s forwarded through the encryption appliance.  However, it’s only setup to work internal to external.  That way when an employee is e-mailing a Dr. or medical professional they can encrypt the e-mail that has HIPAA information.  I don’t know the reason, but they didn’t turn it on internally.  So if I type  and send an e-mail to a colleague it doesn’t get encrypted.  We user Microsoft Lync for internal communication which is HIPAA compliant, so I think it was just a matter of “Why turn it on internally when we already have a system in place?”  I tried to convince them to turn it on for me to use the Alerts, but they didn’t see the need for just 1 alert… I’m trying to see if I can configure LEM with Lync to send the alerts since HIPAA information is OK on the Lync server.  I know it can’ be done via the Solarwinds Network Performance Monitor (NPM), I’m just working on getting it to work.. I’m open to ideas if you have any.  My original hope was to use If-Then to assign names to folders that were picked up by a LEM filter.  That way if the filter picked up the folder
HIPAA\General<file:///
HIPAA\General> Hospital\S-Z\2015\Smith, John\  I could have the if-then filter it.  If keyword “General Hospital” then alert “General Hospital”.  That way it left the HIPAA info “Smith, John” out of the alert.  Having to go through a hospital folder to find a moved folder is one thing, not knowing what hospital folder makes the job 1000% harder.  Most people wouldn’t care.  I have LEM and can immediately see which folder was moved and to where.  This is more for the non-IT personnel that don’t have access to LEM when I’m not around, in a meeting, on vacation, sick, etc… If a folder is moved and I’m not around and they need that patients information it would cause chaos.  Just trying to think ahead to avoid problems we haven’t had yet.


Viewing all articles
Browse latest Browse all 5385


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>