Fortinet fortigate-50r Installationsanweisungen

Customize alert emails to control the content displayed in alert email messages sent 
to system administrators.

Go to System > Config > Replacement Messages.

For the alert email message you want to customize, select Modify 

.

In the Message setup dialog box, edit the text of the message.

 lists the replacement message sections that can be added to alert email 

messages and describes the tags that can appear in each section. In addition to the 
allowed tags you can add any text and HTML code.

Select OK to save the changes.

Used for virus scanning (all services).

<**INFECTED**>

%%FILE%%

The name of the file that was infected.

%%VIRUS%%

The name of the virus infecting the file.

%%URL%%

The URL of the blocked web page or file.

<**/BLOCKED**>

Used when quarantine is enabled (permitted for all scan services and block 

services for email only).

<**QUARANTINE**>

%%QUARFILE

NAME%%

The name of the file that was quarantined.

<**/QUARANTINE**>

NIDS event

Used for NIDS event alert email messages

<**NIDS_EVENT**>

%%NIDS_EVENT%%

The NIDS attack message.

<**/NIDS_EVENT**>

Virus alert

Used for virus alert email messages

<**VIRUS_ALERT**>

%%VIRUS%%

The name of the virus.

%%PROTOCOL%%

The service for which the virus was detected.

%%SOURCE_IP%%

The IP address from which the virus was received. 

For email this is the IP address of the email server 

that sent the email containing the virus. For HTTP 

this is the IP address of web page that sent the 

virus.

%%DEST_IP%%

The IP address of the computer that would have 

received the virus. For POP3 this is the IP address 

of the user’s computer that attempted to download 

the email containing the virus.