You may be experiencing an intermittent issue where SMTP email alerts are either not sent, delayed or sent by bulk. This article will provide troubleshooting steps on how to fix this issue.
Follow these steps to verify if the manager can communicate to the SMTP server:
- Login to your Deep Security Manager (DSM) AMI instance (Linux CLI).
- Run the following command:
telnet <FQDNoftheSMTP:port> (try the port 25 and 587)
- Type "helo" or "ehlo" and check if the DSM server can send some request to the SMTP.
- If the session shows you data from the above snippet, then the connection and communication are happening. Refer back to the configuration on the manager side if you miss something out. Refer to the article Configure SMTP settings for email notifications for the configuration.
- If the connection shows the following entry, proceed to the next set of instructions below.
This is usually caused by the machine not being able to resolve its own hostname before communicating with the SMTP server.
Refer to the overview of SMTP commands, before you proceed:
- Log in to the DSM machine, execute "hostname" command. Remember the hostname.
- Execute "ping <hostname>". The hostname is what you got in the first step.
- If the DSM host can't properly resolve the hostname, then please fix this issue using edit /etc/hosts file.
- Check whether the DSM machine can resolve its hostname. If the issue persist, contact Trend Micro Technical Support for further assistance.