Configuring SMTP settings

To configure the SMTP settings, perform the following subtasks:

Specify the SMTP server
Set the default SMTP notification settings
Configure authentication for SMTP notifications

To specify which SMTP server to use:

Enable the CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable email notifications:

hostname (config) # fenotify email enable

Set the mail relay address used to send the email notifications:
```
hostname (config) # fenotify email mailhub addressip_address
```

Set the mail port used to send the email notifications.

hostname (config) # fenotify email mailhub portport-number

Save the configuration:
```
hostname (config) # write memory
```

To configure the default settings for SMTP notifications:

Enable the CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable email notifications:

hostname (config) # fenotify email enable

Set the domain from which emails appear to come:

hostname (config) # fenotify email domainemail-domain

(Optional) To include the hostname in the return address for email notifications:
```
hostname (config) # fenotify email return host-namehost_name
```
Set the user name in the return address for email notifications (the default is do-not-reply):
```
hostname (config) # fenotify email return user-name user_name
```
Select one of the XML, JavaScript Object Notation (JSON), or Text options for the default format of the notification:
Note
The json_legacy-concise, json_legacy-extended, and json_legacy-normal formats are deprecated.
- To send notifications in XML Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:
```
hostname (config) # fenotify email default format xml-concise
```
- To send notifications in XML Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (XML Extended provides all details about files and objects modified during analysis.), enter:
```
hostname (config) # fenotify email default format xml-extended
```
- To send notifications in XML Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:
```
hostname (config) # fenotify email default format xml-normal
```
- To send notifications in JSON Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:
```
hostname (config) # fenotify email default format json-concise
```
- To send notifications in JSON Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (JSON Extended provides all details about files and objects modified during analysis.), enter:
```
hostname (config) # fenotify email default format json-extended
```
- To send notifications in JSON Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:
```
hostname (config) # fenotify email default format json-normal
```
- To send notifications in Text Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:
```
hostname (config) # fenotify email default format text-concise
```
- To send notifications in Text Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (Text Extended provides all details about files and objects modified during analysis.), enter:
```
hostname (config) # fenotify email default format text-extended
```
- To send notifications in Text Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:
```
hostname (config) # fenotify email default format text-normal
```
Specify how the notification is delivered by default:
- To deliver the notification as an email attachment, enter:
```
hostname (config) # fenotify email default send-as attachment
```
- To deliver the notification in the email body (the default), enter:
```
hostname (config) # fenotify email default send-as in-line
```
Specify the default delivery schedule for email notifications:
Note
Trellix recommends using per-event notifications.
- To receive information about all events detected in the past 24 hours, enter:
```
hostname (config) # fenotify email default delivery daily-digest
```
- To receive information about each event, sent when the event is triggered, enter:
```
hostname (config) # fenotify email default delivery per-event
```
Save the configuration:
```
hostname (config) # write memory
```

To configure authentication for SMTP notifications:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable email notifications:

hostname (config) # fenotify email enable

Enable authentication for event mail notifications:

hostname (config) # fenotify email mailhub auth enable

Enter LOGIN or CRAM-MD5 as the authentication method you want to use to send event mail notifications.
```
hostname (config) # fenotify email mailhub auth auth-method <auth-method>
```
Set the username required to authenticate sending event email notifications:
```
hostname (config) # fenotify email mailhub username <username>
```
Set the password required to authenticate sending event email notifications:
- The password is obfuscated as you type it.
```
hostname (config) # fenotify email mailhub password
Password: <******>
Confirm: <******>
```
- To skip the prompt and display the password in clear text.
```
hostname (config) # fenotify email mailhub password <password>
```
Save the configuration:
```
hostname (config) # write memory
```