SharePoint E-mail notifications

Applies to: Forefront Security for SharePoint

E-mail (SMTP) notifications are critical in keeping SharePoint users informed about changes that occur to their files due to virus cleaning and file filtering, or informing users of infections that exist when a virus is detected and not cleaned. E-mail notifications are also convenient to administrators who prefer to have information delivered directly to their mailbox instead of continually checking logs for activity.

Configuring notifications

There are various types of notification messages and each can be individually configured.

To configure notifications

1. In the REPORT area of the Shuttle Navigator, select Notification. The Notification Setup work pane appears.

   The top pane contains the list of default notification roles. Each role can be customized, as well as enabled or disabled. For more information about each of the roles, see Notification roles.)

2. Enable those notifications that are to be in effect. (For more information, see Enabling or disabling a notification.)

   Note

   Scan job configurations control whether a scan job sends any enabled notifications.

3. Make the desired changes to the notifications that are to be enabled. (For more information, see Editing a notification.)

4. Click Save.

Notification roles

The following list describes the various notification roles. Typically, each notification is used for reporting the who, what, where, and when details of the infection or the filtering performed, including the disposition of the virus or the file. Both File and Virus notifications include individual e-mail notices. E-mail notifications are sent to the e-mail address of the administrator or author.

Virus Administrators Alerts administrators of all viruses detected on a server being protected by FSSP.

Virus Author Alerts someone that a virus has been detected in a file that he or she authored.

Virus Last Modified User Alerts the last person who modified a file that a virus has been detected in that file.

File Administrators Alerts administrators of all files that satisfy the filtering criteria on the server being protected by FSSP. This notification is also used for messages blocked by the file filter.

File Author   Alerts someone that a filter match has been detected in a file he or she authored. This notification is also used for messages blocked by the file filter.

File Last Modified User   Alerts the last person who modified a file that a filter match has been detected in a file. This notification is also used for messages blocked by the file filter.

Keyword Administrators   Alerts administrators of all files that satisfy the keyword filtering criteria on the server being protected by FSSP.

Template Categories   Each of the preceding categories also exists in the listing as a Template for item, to aid you in deploying notification templates to remote servers.

Enabling or disabling a notification

The Enable and Disable buttons in the Notification Setup work pane allow you to enable or disable any selected notification. The current status of each notification is displayed in the list in the top pane, under the State column. A change made to the status of a notification takes effect as soon as you click Save.

Editing a notification

The changes that are made to the lower portion of the Notification Setup work pane apply to the notification role currently selected in the notification list. Making any change to the configuration activates the Save and Cancel buttons. If you make a change to a notification and try moving to another notification role or shuttle icon without saving it, you will be prompted to save or discard your changes. All changes take effect immediately when saved. All fields can have keyword substitution macros.

The following are the fields that can be edited:

To: (Recipients)   A semicolon-separated list of people and groups who will receive the notification. This list can include SharePoint names, aliases, and group e-mail addresses. For servers that are in a domain, user names should follow the syntax: domain\username. For servers that are in a workgroup, user names should follow the syntax: servername\username. This field can include SharePoint keyword substitution macros.

Subject   The message that is sent on the subject line of the notification. This field can include SharePoint keyword substitution macros.

Body   The message that is sent as the body of the notification. This field can include SharePoint keyword substitution macros.