Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Mail Server

Use the Mail Server page to send incident alerts. You can also create custom delivery rules.

To send incident alerts:
  1. Go to System > Mail Server. The Mail Server page opens.
  2. Enable Send Incidents Alerts.
  3. Configure the mail server settings.

    SMTP Server Address

    SMTP server address.

    Port

    SMTP server port number.

    From

    The mail server email account. This is the "from" address.

    Login User

    The mail server login account.

    Login Password

    Enter and confirm the password.

  4. (Optional) Click Send Test Email to send a test email to one or more email addresses. If an error occurs, the error message appears at the top of the page and is recorded in the System Logs.
  5. Click Save.
  6. Click Reset to restore the default settings.
To create a custom alert delivery rule:
  1. Click Customer Alert Deliver Rule. The Custom Alert Rule dialog opens.
  2. Enable the rule. When enabled, FortiDeceptor sends an email alert to the Receiver Email List according to the rule
  3. Configure the rule settings.

    Name

    Enter a name for the rule.

    Alert Severity

    Select Low, Medium, High, or Critical.

    Alert Type

    Select Connection, Reconnaissance, Interaction, or Infection.

    Incident Alert Section

    Select All, Interaction Events Only, IPS events only, or Web filter events only.

    Binary Infection

    This options is available when the Alert Type is Interaction or Infection .

    Select Yes to be alerted when an attacker drops or downloads suspicious files into decoys.

    Attacker IP

    Enter the attacker IP address

    Victim Decoy Service

    Enter one or more decoy service port numbers.

    Recipients

    Enter one or more receiver email addresses.

  4. Click Save.

Mail Server

Use the Mail Server page to send incident alerts. You can also create custom delivery rules.

To send incident alerts:
  1. Go to System > Mail Server. The Mail Server page opens.
  2. Enable Send Incidents Alerts.
  3. Configure the mail server settings.

    SMTP Server Address

    SMTP server address.

    Port

    SMTP server port number.

    From

    The mail server email account. This is the "from" address.

    Login User

    The mail server login account.

    Login Password

    Enter and confirm the password.

  4. (Optional) Click Send Test Email to send a test email to one or more email addresses. If an error occurs, the error message appears at the top of the page and is recorded in the System Logs.
  5. Click Save.
  6. Click Reset to restore the default settings.
To create a custom alert delivery rule:
  1. Click Customer Alert Deliver Rule. The Custom Alert Rule dialog opens.
  2. Enable the rule. When enabled, FortiDeceptor sends an email alert to the Receiver Email List according to the rule
  3. Configure the rule settings.

    Name

    Enter a name for the rule.

    Alert Severity

    Select Low, Medium, High, or Critical.

    Alert Type

    Select Connection, Reconnaissance, Interaction, or Infection.

    Incident Alert Section

    Select All, Interaction Events Only, IPS events only, or Web filter events only.

    Binary Infection

    This options is available when the Alert Type is Interaction or Infection .

    Select Yes to be alerted when an attacker drops or downloads suspicious files into decoys.

    Attacker IP

    Enter the attacker IP address

    Victim Decoy Service

    Enter one or more decoy service port numbers.

    Recipients

    Enter one or more receiver email addresses.

  4. Click Save.