Device Configuration : System : Administration : Notification Settings
Notification Settings
Device Configuration > System > Administration > Notification Settings
Device allows configuration of Email notifications for certain system-generated events and reports (as specified by administrator). Such Email notifications can be configured to inform administrator about:
Change in gateway status
Change in HA (high availability) link status (if HA cluster is configured)
Change in State of IPSec Tunnel(s)
Configure a Mail Server IP Address, Port, and Email Address for the device to send and receive alert Emails. Below are the screen elements with their description:
Mail Server Settings
Send Notifications via
Built-in Email Server- Select if you want to use the built-in Email Server in the Device to send system-generated emails.
External Email Server - Select to configure an External Email Server to send system-generated emails.
Mail Server IPv4 Address/ FQDN - Port
Specify the Mail Server IPv4 Address or FQDN Address and Port number.
Default - 25
Authentication Required
Enable to authenticate user before sending an Email.
Specify user credentials.
Username
Specify the User Name, which uniquely identifies user and will be used for login.
Password
Specify the password.
Connection Security
Select Connection Security mode, to be used for establishing a secured connection between SMTP Client and the SMTP Server for SMTP Mail Notification.
Available Options:
None – Select if your SMTP Server does not support TLS (Transport Layer Security) or a secured connection between SMTP Client and the SMTP Server is not required. If selected, a normal TCP connection is established, without any security.
STARTTLS - SMTP Client establishes a TCP connection with the SMTP Server to learn about the TLS capabilities of the server. If the SMTP Server supports STARTTLS, the connection is upgraded to TLS. If the SMTP Server does not support STARTTLS, the SMTP Client continues to use the normal TCP connection.
SSL/TLS - SMTP Client establishes a TLS connection with the SMTP Server. In case the SMTP Server does not support TLS, no connection is made between the SMTP Client and the SMTP Server.
Default – None
Certificate
Select a Certificate, to be used for authentication by SMTP Client and the SMTP Server.
Default - Applicance Certificate
Email Settings
From Email Address
Specify the Email Address from which the notification is to be mailed.
Send Notifications to Email Address
Specify the Email Address to which the notification is to be mailed.
Email Notification
IPSec Tunnel UP/Down
Enable to receive Email notification if the IPSec VPN tunnel connectivity is lost.
Email alerts are sent to Administrator on the configured Email Address. All the IPSec tunnels follow the single configuration done from this page.
An Email is sent only for Host to Host and Site to Site tunnel connections; if it flaps due to one of the following reasons:
A peer is found dead (DPD)
Failed to re-establish connection after Dead Peer Detection (DPD)
IPSec Security Association (SA) is expired and is required to be re-established.
IPSec Tunnel comes up without administrator intervention after losing the connectivity.
Email shall contain following basic information:
IPSec Connection name
IP Addresses of both participating hosts/network
Current state of the IPSec Tunnel connection, viz, Up or Down
Time when IPSec Tunnel was disconnected
Reason for lost of IPSec Tunnel connection
Device Model Number
Firmware version and build number
Device Key (if registered)
Device LAN IP Address
HA configuration – Primary/Auxiliary (if configured)
An Email is sent for each subnet pair in case of Site to Site connections, having multiple local/remote networks.
An Email sent with respect to IPSec Tunnel coming up; do not have any reason mentioned within.
Description of IPSec Tunnel connection is included in the Email, only if the information for same is provided by the Administrator.
* Mail Server configuration changes automatically when changed from the Network Configuration Wizard and vice versa.