Hi Again,

I'm noticing that there are a LOT of items that say to push to Email when Syslog is a viable option but there is no mandate to set up an Email server on the system.

Personally, I'm finding that automated Syslog analysis is more ubiquitous than automated Email alert processing and think that these should be changed to Syslog by default since that is guaranteed to be working on the system per the SSG.

If Email is going to be the mechanism in use, then the SSG should require that an Email server be installed and configured properly on the local host since firing messages off into the ether is not a guaranteed delivery mechanism for critical alerts. Additionally, like Syslog, there would need to be a check to ensure that the system is forwarding Email to a remote host.

Thoughts?

Thanks,

Trevor

--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --