Alerting

To facilitate tracking and management of both web protection software and client Internet activity, Super Administrators can configure alerts to be sent when selected events occur.

• System alerts notify administrators of Filtering Service events relating to subscription status and Forcepoint URL Database activity, as well as Content Gateway events, including loss of contact to a domain controller, log space issues, and more.
• Usage alerts notify administrators when Internet activity for selected categories or protocols reaches configured thresholds.

  Usage alerts can be generated for both pre-defined and custom categories or protocols.

• Suspicious activity alerts notify administrators when threat-related events of a selected severity level reach a configured threshold or, for Forcepoint Web Security customers who have enabled advanced file analysis, when a file that was sent for analysis is found to be malicious.

All alerts can be sent to selected recipients via email or SNMP.

Note that alerting must be enabled and configured before system, usage, or suspicious activity alerts can be generated. See Configuring general alert options.

Additional information about appliance alerts and how to configure and enable them can be found in the Forcepoint Appliances CLI Guide.