Configuring E-mail Audit Sources
Updated in 2022.2
You configure a E-mail Audit Source when you create a new Site, or create or modify an Audit Source within an existing Site.
NOTE: E-mail Audit Sources serve for theRemote Audit with e-mail delivery. For details, see Remote Audit with email delivery
To create an E-mail Audit Source:
-
In the Sidebar, right-click the Site where you want to create the source and choose Properties from the pop-up menu. The Site [Site Name ] window opens.
-
Under Audit Sources, click New > E-mail.
-
Fill out the source details in the E-mail Audit Source [Source Name] window.
-
Choose how to deliver the audit agent to the computers you want audited. You can use any or both of these options:
-
Create an installer and install the audit agent on every computer.
To create the installer right now, optionally change the default agent schedule, click Create Installer, and choose where to save your AlloyAuditAgent.msi file.
TIP: You can skip this step now and create the installer later. For details, see Installing the Audit Agent for E-mail Delivery.
-
Create an Inventory Analyzer package, deploy it to remote networks, and automate the audit using domain logon scripts or scheduled tasks.
To build the Inventory Analyzer package right now, click Create Package and browse to the destination folder.
TIP: You can skip this step now and build the package later. For details, see Preparing the Inventory Analyzer Package for the E-mail Delivery.
-
-
Click OK.
NOTE: In case an E-mail Audit Source is configured successfully, it is represented by the e-mail folder icon . If the Inventory Server cannot access the source (for example, when the mail server is unavailable), the red flag icon appears.
To edit the properties of an existing E-mail Audit Source:
-
In the Sidebar, right-click the desired Site and then choose Properties from the pop-up menu. The Site [Site Name ] window opens.
-
Under Audit Sources, double-click the desired source.
-
Modify the source as needed in the E-mail Audit Source [Source Name] window.
-
Choose how to deliver the audit agent to the computers you want audited. You can use any or both of these options:
-
Create an installer for Windows and/or macOS and install the audit agent on every computer.
TIP: For details, see Installing the Audit Agent for E-mail Delivery. You can skip this step now and create the installer later.
-
Create an Inventory Analyzer package, deploy it to remote networks, and automate the audit using domain logon scripts or scheduled tasks.
TIP: For details, see Preparing the Inventory Analyzer Package for E-mail Delivery. You can skip this step now and build the package later.
-
-
Click OK.
E-mail Audit Source [Source Name ] window
The properties of the source are shown in the E-mail Audit Source [Source Name ] window and organized on the following tabs: General, E-mail, Incoming Mail Server, SMTP Server, and Options.
General tab
On this tab, you view and modify the general properties of the source.
Site Tag - displays the tag of the Site to which the audit source belongs. You can not edit this field.
Name - shows the name of the source.
Audit Profile - allows you to choose the Audit Profile to use. You can choose the audit profile either in the drop-down list or in the Select Audit Profile window that opens on clicking the ellipsis button . To modify the audit profile, click the ellipsis button , in the opened window, double-click the desired audit profile from the list, modify the profile as needed, and click OK. To create a new audit profile, click the ellipsis button , click New, define the profile, and click OK.
Windows Installer section - enables you to install the audit agent on the offsite computers and specify the schedule for running the audit automatically. Clicking Create Installer allows you to create an installer ( AlloyAuditAgent.msi) for this audit source and install it. The Windows Task Scheduler will use specified schedule to start the audit at a specified date and time. For details, see Installing the Audit Agent for E-mail Delivery.
Package section - clicking Create Package allows you to prepare an Inventory Analyzer package for this audit source. For details, see Preparing Inventory Analyzer package for an E-mail Audit Source.
IMPORTANT: You can deploy the Inventory Analyzer package only after configuring all required source properties (general details, e-mail details, incoming mail server details, and SMTP server details) and clicking Apply. Heretofore the Create Package and the Create Installer buttons are deactivated.
E-mail tab
On this tab, you specify the following details:
E-mail address where audit results will be sent - the e-mail address where to deliver audit snapshots via e-mail.
"From" address - optionally, specify the ”From” address that will appear on these e-mail messages. note that some mail servers may reject messages with a blank ”From” address
Incoming Mail Server tab
On this tab, you view and modify the settings for the mail server that handles the incoming audit results:
-
Server Type - the account type for incoming mail: POP3, IMAP4, or Exchange Online.
For POP3/IMAP4:
-
Server Name - the name of your incoming mail server.
-
Port - the port number of your incoming mail server.
Depending on the chosen connection settings, the default port number follows:
Connection type POP3 IMAP4 Non-secure connection/TLS 110 143 Secure connection (SSL) 995 993 -
Mail Box (for IMAP4 only)- the name of the mailbox folder to fetch e-mail messages from.
-
User Name -the user name to connect to the mail server.
-
Password - the password to connect to the mail server.
-
Require Secure Password Authentication (SPA) - select this check box if your incoming mail server requires SPA.
- Secure Connection - select one of the following options:
None - This establishes an insecure (plain text) connection.
STARTTLS, if available - This establishes a secure connection using the STARTTLS extension if it is supported by the mail server. If the server does not support STARTTLS, an insecure connection is established.
STARTTLS, if available - This establishes a secure connection using the STARTTLS extension if it is supported by the mail server. If the server does not support STARTTLS, an insecure connection is established.
SSL/TLS - The Mail Connector will attempt to establish a secure connection. If the mail server does not support SSL/TLS, a connection is not established.
-
Reject invalid certificates - specifies that Alloy Discovery terminates the connection with the mail server via a secure connection when a certificate validation error occurs.
-
Test Settings - verifies that Alloy Discovery can connect to the specified mail server.
For Exchange Online:
-
Click the Sign in hyperlink to sign in to your Microsoft account. If you're already signed in with one account, you can change it by clicking the Change hyperlink and choosing another account.
-
Specify which folder on the server the Mail Connector will monitor for incoming messages. The default folder is INBOX. If needed, you can use a subfolder, such as "INBOX/Support".
-
Click Test Connection to verify that the Mail Connector can access the specified mailbox.
-
SMTP Server tab
On this tab you specify the settings for the SMTP mail server in the remote network, which the Inventory Analyzer will use for sending the audit results.
Outgoing mail server - the name of the outgoing mail server in the remote network.
Outgoing mail server port - the port number of the outgoing mail server in the remote network. By default, the port number is 25; for secure connection via SSL, the default port number is 465.
My outgoing (SMTP) server requires authentication - specifies that the SMTP server requires users to authenticate:
User name - the user name for authentication on the SMTP Server in the remote network.
Password - the password for authentication on the SMTP Server in the remote network.
Require Secure Password Authentication (SPA) - specifies that the outgoing SMTP mail server requires Security Password Authentication.
Secure Connection - select one of the following options:
-
None - This establishes an insecure (plain text) connection.
-
STARTTLS, if available - This establishes a secure connection using the STARTTLS extension if it is supported by the mail server. If the server does not support STARTTLS, an insecure connection is established.
-
STARTTLS - The Mail Connector will attempt to establish a secure connection using the STARTTLS extension. If the mail server does not support STARTTLS, a connection is not established.
-
SSL/TLS - The Mail Connector will attempt to establish a secure connection. If the mail server does not support SSL/TLS, a connection is not established.
-
Reject invalid certificates - specifies that Alloy Discovery terminates the connection with the mail server via a secure connection when a certificate validation error occurs.
Test Settings - checks the outgoing SMTP mail server connection using the specified settings.
Options tab
On this tab, you define how to handle the e-mail messages and check for audit snapshots.
When looking for audit snapshots in the IMAP folder section (available you are using an IMAP account for incoming mail; see the Incoming Mail Server tab) - defines how to check the received e-mail and handle the messages after audit snapshots uploading.
Upload Interval section - specifies the time interval for auto-checking the mailbox for audit snapshots. You can also disable auto-checking.