Email notification behavior upon malware detection in Threatshield

Email notification behavior upon malware detection in Threatshield - F-Secure Community

Issue:

Malware detection email was not received by sender and/or recipient during malware detection, even though it is configured to do so on Threatshield's Web User Interface.

Resolution:

As per the screenshot below, these are the choices to notify the sender and recipients when there is a malware detection.

Actions on malware detection

These notifications will only be sent to sender and/or recipient when the sender and/or recipient is within the Protected Domains or Subnetworks.

Protected domains and subnetworks

Sender's server address MUST be set using IP or Hostname.
Recipient's server address MUST be set using Domain name.

Below are the specific behavior of Threatshield's notification email.

	Notification sent to sender	Notification sent to recipient
Protected -> Protected	Yes	No
Protected -> Non-protected	Yes	No
Non-protected -> Protected	No	Yes
Non-protected -> Non-protected	No	No

Where:

Protected : Domain specified in Protected Domains or Subnetworks.
Non-protected : Domain that are not specified in Protected Domains or Subnetworks.

Example 1 :
Protected domains and subnetworks: <server A IP address>

Server A will be considered as Sender's protected domain, hence the behavior will follow "Protected -> Protected"

Example 2 :
Protected domains and subnetworks: <server A domain>

Server A will be considered as Recipient's protected domain, hence the behavior will follow "Non-protected -> Protected"

Article no: 000018404