Sourcefire | sending email notification it detects malware

[John]

May we know if SourceFire is capable of sending notification via email in an event it detect malwares?

[yogdhanu]

Hi John,

yes it can. Please see the user guide for more info.

http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Intrusion-External-Responses.html#58493

In short , you need to navigate to Policy> AMP alerts for this

Thanks

Yogesh