Configure Security Threat Notifications

For supported software information, click here.

You can configure Security Service Edge (SSE) gateways to send Versa Secure Access (VSA) threat notifications for applications that support VSA notifications. These applications include:

• Advanced threat prevention (ATP)
• Antivirus (AV)
• Cloud access security broker (CASB)
• Data loss prevention (DLP)
• Intrusion prevention system (IPS)
• IP filtering

When one of the applications attempts an activity that is subject to a security rule, a threat notification is sent that identifies the application that was used and the activity that was attempted.

To configure security threat notifications:

1. Go to Configure > Secure Service Edge > Real-Time Protection > Settings > Security Notifications.
   
   
2. In the Security Notifications screen, enter information for the following fields.
   
   
    

   Field	Description
   Threat Notification	Slide the toggle to enable or disable security threat notifications.
   Timeout	Enter the timeout period, in seconds, after which notifications are no longer sent. Range: 1 through 254 seconds Default: 30 seconds
   Suppression Interval	Enter the duplicate notification suppression interval, in seconds. If an event occurs that triggers a threat notification, and if the same event occurs within the suppression interval period, no additional notifications are sent until the suppression interval ends. The notification message shows the how much time remains until the suppression interval ends. Range: 1 through 254 seconds Default: 120 seconds

3. Click Save.