Forefront Client Security TechCenter > Forefront Client Security Forums > Forefront Client Security Alerting and Monitoring > Forefront Alerting - Do not want alerts on successful cleans. How do I configure that in MOM
Ask a questionAsk a question
 

AnswerForefront Alerting - Do not want alerts on successful cleans. How do I configure that in MOM

  • Thursday, November 05, 2009 8:28 PMMGMNVA Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I am getting to much alert noise from FCS. All my workstation 8000 are set at alert level 3. I do not want to recieve an alert if FF successfully responded to an event. How do  I configure this? I recieve emails  that tell me Forefront successfuly removed stuff.

Answers

  • Thursday, November 05, 2009 8:51 PMMGMNVA Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I figured it out. Do this:

    1. Open MOM Console --> Management Packs --> Rule Groups --> Microsoft Client Security (enabled) --> Alert Level 3
    2. Open Event Rules --> Right Click on Malware on Network - Successful Response (Alert Level3)
    3. Select the General Tab
    4. Uncheck the "This rule is enabled".
    • Marked As Answer byMGMNVA Thursday, November 05, 2009 9:03 PM
    •  

All Replies

  • Thursday, November 05, 2009 8:51 PMMGMNVA Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I figured it out. Do this:

    1. Open MOM Console --> Management Packs --> Rule Groups --> Microsoft Client Security (enabled) --> Alert Level 3
    2. Open Event Rules --> Right Click on Malware on Network - Successful Response (Alert Level3)
    3. Select the General Tab
    4. Uncheck the "This rule is enabled".
    • Marked As Answer byMGMNVA Thursday, November 05, 2009 9:03 PM
    •