Setting the Default Email Notification Configuration Using the CLI

When adding email recipients, there is a default configuration that they will receive. This section will guide you through setting up this default configuration.

Prerequisites

  • The Malware Analysis appliance must have network access to an SMTP server.
  • You must have Admin or Operator access to the Malware Analysis appliance.

To set the default configuration for email notifications:

  1. Enable the CLI configuration mode:
    hostname > enable
    hostname # configure terminal
  2. Review the current default configuration:

    hostname (config) # show fenotify email 
    
    Notification Protocol: email
    
       Configuration: 
          Protocol Enabled:                yes
          default-delivery                 per-event 
          default-format                   text-normal 
          default-send-as                  in-line 
          domain                           fireeye.com 
          mailhub-address                  192.168.1.1 
          mailhub-port                     25 
          return-address                   donotreturn@NX2500.company.com 
          return-host-name                 true 
          return-user-name                 testing 
          tls-enable                       false 
          tls-verify                       false 
    
       Alerts: 
          domain-match                      yes
          infection-match                   no
          ips-event                         no
          lnec-alert                        no
          malware-callback                  yes
          malware-object                    yes
          riskware-callback                 no
          riskware-object                   no
          web-infection                     yes
    
       Consumers: 
    
       Bob
          enabled:                         yes
          alerts-update                    true 
          email-address                    bob@fireeye.com 
          prefer-notification              all-events
  3. Set the default delivery frequency: fenotify email default delivery <frequency> command.

    For example, to set the default delivery frequency to per-event (recommended):

    hostname (config) # fenotify email default delivery per-event

  4. Set the default notification format: fenotify email default format <format> command.

    For example, to set the default format to JSON normal:

    hostname (config) # fenotify email default format json-normal

  5. Specify the default notification message is embedded or an attachment: fenotify email default send-as {in-line | attachment} command.

    For example, to embed the notification message:

    hostname (config) # fenotify email default send-as in-line

  6. Save the configuration:

    hostname (config) # write memory