Notifications alert administrators and computer users about potential security problems.
Some notification types contain default values when you configure them. These guidelines provide reasonable starting points depending on the size of your environment, but they may need to be adjusted. Trial and error may be required to find the right balance between too many and too few notifications for your environment. Set the threshold to an initial limit, then wait for a few days. After a few days, you can adjust the notifications settings.
For virus, security risk, and firewall event detection, suppose that you have fewer than 100 computers in a network. A reasonable starting point in this network is to configure a notification when two risk events are detected within one minute. If you have 100 to 1000 computers, detecting five risk events within one minute may be a more useful starting point.
You manage notifications on the
Monitorspage. You can use the
Homepage to determine the number of unacknowledged notifications that need your attention.
The following table lists the tasks you can perform to manage notifications.
Learn about notifications
Learn how notifications work. See:
Confirm that the email server is configured to enable email notifications
Notifications sent by email require that the
Symantec Endpoint Protection Managerand the email server are properly configured. See:
Review preconfigured notifications
Review the preconfigured notifications provided by
Symantec Endpoint Protection. See:
View unacknowledged notifications
View and respond to unacknowledged notifications. See:
Create notification filters
Optionally create filters to expand or limit your view of all of the notifications that have been triggered. See: