Good morning:
We're running RS 6.0, and am attempting to set up an email notification response for a particular event on our Network Sensor. First, I customized the current / active response file by checking the email option, and filling in the appropriate fields (Gateway - our email server IP & Account - my email address). Then, I saved those modifications, and applied that response file to the sensor. Next, I went into the current / active policy on the sensor, and in the Security Events, I checked the event that I want to be emailed on. I also saved those modifications, and applied them to the sensor. My issue is that when I checked the Email (response type) option for that Security Event, the "Response Name" in that same windo reflects "default", and not the current / active response file name that I previously applied to the sensor.
Q: What do I need to do to have that Security Event show and use the customized, active response file instead of the "default?
Thanks in advance for your input.
Latricia L. Ledet
Systems Security
CitiStreet TBO Division
