Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How do I create an Email or SNMP Notification Contact via the LSM?

    • Updated:
    • 30 Nov 2017
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint TPS All
    • TippingPoint TX-Series All
    • TippingPoint Virtual TPS All
    • Platform:
Summary

Email or SNMP

Sends messages to the email address or specified SNMP. All email or SNMP contacts must be added from the Notification Contacts page. If the default email server is not configured on the device, you will be prompted to configure it before adding a contact.

Note: Before creating an Email or notification contact, you must configure Email and SMTP server settings on the IPS device from the Email Server page.

Alert Aggregation and the Aggregation Period - The IPS uses Alert Aggregation to prevent system performance problems resulting from an excessive number of notification requests. Because a single packet can trigger an alert, attacks with large numbers of packets could potentially flood the alert mechanism used to send out notifications. Alert aggregation allows you to receive alert notifications at intervals to prevent this flooding.

For example, if the aggregation interval is 5 minutes, the system sends an alert at the first IPS filter trigger collects subsequent alerts and sends them out every five minutes. On the IPS, alert aggregation is controlled by the aggregation period that you configure when you create a notification contact. This setting is required for all notification contacts.

 

CAUTION: Short aggregation periods can significantly affect system performance. The shorter the aggregation period, the higher the system load. In the event of a flood attack, a short aggregation period can lead to system performance problems.

Details
Public

IPS Procedure

  1. On the LSM menu, click IPS > Notification Contacts.
  2. Click Add Contact.
  3. On the Create Contact page, select Email or SNMP.
  4. Enter the contact name.
  5. Enter the Aggregation Period. Longer aggregation periods improve system performance.
  6. If the contact is an email contact, enter the address where notifications will be sent in the To Email Address field. If the contact is an SNMP contact, enter the host IP address and port number.
  7. Click Create to save the changes.

 

TPS Procedure

  1. On the LSM menu, click Policy > Notification Contacts.
  2. Click Add.
  3. On the Create Contact page, select Email or SNMP.
  4. Enter the contact name.
  5. Enter the Aggregation Period. Longer aggregation periods improve system performance.
  6. If the contact is an email contact, enter the address where notifications will be sent in the To Email Address field. If the contact is an SNMP contact, enter the host IP address and port number.
  7. Click Create to save the changes.

 

Note: SNMP notification contacts requires SNMPv2, and will not work when SNMPv2 is disabled.

 

Reference: Local Security Manager User's Guide

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000095732
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.