Use these instructions to configure an Email Security — Server appliance to send notifications to Trellix Helix.
The Email Security — Server appliance must have an established connection to the Internet.
You must have Admin access to the Email Security — Server appliance.
In the Email Security — Server Web UI, select the Settings tab.
.png)
Select Notifications on the side bar.
Click the rsyslog column heading to display the Rsyslog Settings area in the Settings column.
Select Common Event Format (CEF) in the Default format drop-down list.
.png)
Click Apply Settings.
Note
If you do not click Apply Settings, your changes will be lost.
In the Rsyslog Server Listing area, enter the name or IP address of the Communications Broker or syslog-enabled Cloud Collector in the Name box and click Add Rsyslog Server.
.png)
To apply the rsyslog server listing changes, click Update.