Customizing notifications in Symantec Protection Engine
You can configure Symantec Protection Engine to customize messages to users to notify them when a file is infected, denied access to, encrypted, or deleted. You can add the text to the body of a replacement file for a deleted attachment.
Symantec Protection Engine attaches a text file to the email message in the place of each attachment that is deleted. The text file that is inserted is called DELETED<N>.TXT, where N is a sequence number. For example, if two attachments are deleted, the replacement files are called
DELETED0.TXT
and DELETED1.TXT
.If the attachment is container file that contains an encrypted file, Symantec Protection Engine inserts a text file in place of the encrypted file in the container.
When you use ICAP, Symantec Protection Engine displays an HTML text message to the user when a requested file is blocked. Access to a file is blocked when the file contains a threat and deleted.
User notification messages describes the types of notification messages that you can customize.
Type of notification | Default text |
|---|---|
Deleted file | File: ${FILE_NAME} was infected with ${THREAT_NAME} (${THREAT_ID}). File ${QUARANTINED}. File was deleted. |
Infected file | File: ${FILE_NAME} was infected with ${THREAT_NAME} (${THREAT_ID}). File ${QUARANTINED}. File is still infected |
Total threat found | This email message was infected. ${TOTAL_THREATS} number of threats were found. |
Denied file size | The file attached to this email was removed because the file size is not allowed. File attachment: ${FILE_NAME}. Matched file size: ${FILE_SIZE}. |
Denied file names | The file attached to this email was removed because the file name is not allowed. File attachment: ${FILE_NAME}. Matched pattern: ${MATCHING_FILENAME_ENTRY}. |
Encrypted file | The encrypted container attached to this email was removed. File attachment: ${FILE_NAME}. File ${QUARANTINED}. |
Web browser | The content you just requested contains ${THREAT_NAME} and was blocked by the Symantec Protection Engine based on local administrator settings. Contact your local administrator for further information. |
You can configure Symantec Protection Engine to customize Insight messages to notify users when a file is infected, replaced, or deleted. You can add the text to the body of an infected MIME-encoded message or to the body of a replacement file for a deleted attachment.
Customizing notifications in the Core server only mode to work with the Core server only mode.
Insight notification messages describes the types of Insight notification messages that you can customize.
Type of notification | Default text |
|---|---|
Deleted file | File: ${FILE_NAME} was infected with ${THREAT_NAME} (${THREAT_ID}). File ${QUARANTINED}. File was deleted. |
Infected file | File: ${FILE_NAME} was infected with ${THREAT_NAME} (${THREAT_ID}). File ${QUARANTINED}. File is still infected. |
Notification variables lists the variables that you can use to customize your notifications.
Variable | Description |
|---|---|
${FILE_NAME} | The name of the infected file. |
${FILE_SIZE} | The size of the file that violates the maximum file size threshold. |
${THREAT_NAME} | The name of the threat. |
${THREAT_ID} | The threat identification number. |
${QUARANTINED} | Indicates whether a file was quarantined. |
${TOTAL_THREATS} | The total number of risks that are detected in the MIME message. |
${MATCHING_ FILENAME_ENTRY} | The file name pattern that triggered the violation. |
- To customize user notifications in Symantec Protection Engine
- In the console on the primary navigation bar, clickPolicies.
- In the sidebar underViews, clickNotifications.
- UnderUser Message Notifications, checkAdd text to the body of replacement file for a deleted attachment.
- Customize any of the user notification messages.
- On the toolbar, select one of the following options:SaveSaves your changes.Use this option to continue making changes in the console until you are ready to apply them.ApplyApplies your changes.Your changes are not implemented until you apply them.