Cisco Cisco Firepower Management Center 4000
31-9
FireSIGHT System User Guide
Chapter 31 Configuring External Alerting for Intrusion Rules
Understanding Email Alerting
Step 8
To send brief email alerts, next to
Summary Output
, select
on
.
Tip
If you enable
Summary Output
, consider enabling
Coalesce Alerts
to reduce the number of alerts generated.
Also consider setting
Max Alerts
to 1 to avoid overflowing your device’s text message buffer.
Step 9
In the
Time Zone
field, select your time zone from the drop-down list.
Step 10
To enable email alerting per rule, click
Email Alerting per Rule Configuration
.
The rule groups appear.
Tip
To receive email alerts for all rules in all categories, select
Select All
.
Step 11
Perform one or both of the following:
•
Click
All
next to rule categories for which you want to receive email alerts for all rules belonging to
the category.
•
Click the category folder within which you want to specify email alerting on individual rules in that
category, then enable the rules for which you want to receive email alerts.
category, then enable the rules for which you want to receive email alerts.
Step 12
Click
Save
.
The system saves your email alerting configuration. When applicable intrusion events occur, you receive
email alerts.
email alerts.