Xcitium Enterprise Admin Guide- Create a New Alert

Introduction To Xcitium Enterprise - Endpoint Protection Platform
- Key Concepts
- Best Practices
- Login Into The Admin Console
- Upgrade To Full Version
The Admin Console
The Dashboards
CNAPP Dashboard
ROI Dashboard
Devices And Device Groups
- Manage Device Groups
- Manage Devices
- Bulk Enrollment Of Devices
  - Enroll Windows, Mac OS And Linux Devices By Installing The Communication Client
  - Enroll Android And IOS Devices Of AD Users
- Download And Install The Remote Control Tool
Cloud Workloads
Cloud Assets
Cloud Security
- View Vulnerabilities Findings
- Registry Scan
- CSPM Executive Dashboard
- Compliance Summary
- CWPP Dashboard
- App Behavior
- Manage Policies
- Remediation
- View Alerts
- Manage Triggers
- View Reports
Users And User Groups
- Manage Users
- Manage User Groups
- Configure Role Based Access Control For Users
Configuration Templates
- Create Configuration Profiles
- View And Manage Profiles
  - Export And Import Configuration Profiles
  - Clone A Profile
- Edit Configuration Profiles
- Manage Default Profiles
- Manage Alerts
  - Create A New Alert
  - Edit / Delete An Alert
- Manage Procedures
- Manage Monitors
  - Create Monitors And Add Them To Profiles
    - Monitors For Windows Devices
    - Monitors For Mac OS Devices
  - View And Edit Monitors
- Data Loss Prevention Rules
Security Systems
- View Alerts And Security Events
- Investigate Events
- Endpoint Security Status
- View And Manage Blocked Threats
- View And Manage Quarantined Items
- View Contained Threats
- View And Manage Autorun Items
- Manage File Trust Ratings On Windows Devices
  - File Ratings Explained
- View List Of File Verdicts
- View History Of External Device Connection Attempts
- Data Loss Prevention Scans
  - DLP Logs
  - DLP Quarantined Files
Network Management
- Create And Run Network Discovery Tasks
- Manage Profiles For Network SNMP Devices
- Manage Network Devices
  - Manage SNMP Devices
    - SNMP Device Details Interface
  - Discovered Devices
- Manage Network Monitors
Software Inventory
- View Applications Installed On Android And IOS Devices
  - Blacklist And Whitelist Applications
- Patch Management
  - Manage OS Patches On Windows Endpoints
  - Install 3rd Party Application Patches On Windows Endpoints
    - Xcitium Supported 3rd Party Applications
- View And Manage Applications Installed On Windows Devices
  - Uninstall A Windows Application From Selected Devices
  - Uninstall A Windows Application From All Devices
- Vulnerability Management
Management Settings
- Account Management
- License Management
Configure Xcitium Enterprise
- Email Notifications, Templates And Custom Variables
- Xcitium Enterprise Portal Configuration
- Dashboard Settings
- Cloud Security Settings
- Data Protection Templates
  - View And Manage Pattern Variables
  - View And Manage Keyword Groups
- View Version And Support Information
- Alert Notification Settings
Appendix 1a - Xcitium Services - IP Nos, Host Names And Port Details - EU Customers
Appendix 1b - Xcitium Services - IP Nos, Host Names And Port Details - US Customers
Appendix 2 - Pre-configured Profiles
Appendix 3 - Default Xcitium Security Policy Details
About Xcitium

Create a New Alert

There are two ways to create an alert:

Create a new alert

Clone an existing alert and edit it as required

Create a new alert

Click 'Assets' > 'Configuration Templates' > 'Alerts'

Click 'Create Alert'

Alert name - Enter a label for the alert

Description - Short notes about the alert

Click 'Create'

The alert is saved and the configuration screen opens at the 'General' section:

Click the 'Alert Settings' tab then 'Edit':

Don't create additional alerts (about the same issue) for - Specify whether repeat alerts should be generated if the same issue occurs within the stated period. You can choose a time period between 5 minutes and 5 days.

Create notifications on the portal - The alert is also shown in the Notifications screen.

Create alert tickets on the Service Desk - Applies only to Xcitium products with Service Desk. Leave the option disabled.

Click 'Save'

Click 'Additional Recipients' then 'Edit' to choose additional recipients of alert emails:

Send e-mails if Monitoring or Procedure register alerts more than the selected number of consecutive times - Choose when email alerts should be sent about an issue. For example, if you select 5 from the drop-down, email alerts are only sent if the same issue occurs 5 times.

Send to the portal administrators - Emails are sent to all users that have an 'Administrator' role.

Send to the following e-mail addresses - Add additional recipients of the alert. You can add multiple recipients. Press either 'Tab' or 'Enter' between email addresses.

Send to the following portal users - Add recipients who have a 'User' role. Start typing the username and select from the suggestions. You can add multiple users.

Click 'Save' to apply your changes. The alerts will be available for selection in the Procedure section and while configuring Monitor Settings for a Windows profile.

Create an alert by cloning an existing alert

Click 'Assets' > 'Configuration Templates' > 'Alerts'

Select the alert you want to clone.

Click 'Clone Alert' at the top:

If required, enter a new name for the alert and a short description

Click 'Clone'

A new alert is created with settings identical to the source alert.

Click the name of the cloned alert

Edit the alert settings as required. The section above explains all settings, if you need help with them.

Click 'Save' to apply your changes

Xcitium Enterprise

Xcitium Enterprise Administrator Guide

English

Create a New Alert