IIS SMTP server

Applies To: IIS SMTP server, IIS Manager version 6.0 and later.

Overview

The Simple Mail Transfer Protocol (SMTP) service provided by IIS is a simple component for delivering outgoing e-mail messages. Delivery of a message is initiated by transferring the message to a designated SMTP server.

EventTracker helps you to monitor event activities in IIS SMTP server. It will trigger an alert whenever it detects an error or a blacklisted spam ip. It’s knowledge object will help you make log search easier and informative. It can able generates flex reports, flex dashboards for IIS SMTP server.

EventTracker Knowledge Pack for IIS SMTP server allows you to monitor the following :-

Security - Spam ip detection and user authentication failures.
Compliance - Mail transfer errors.
Operation - Mail traffic report with sender and recipient details.

Previous Next

Once IIS SMTP server is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information, please refer Integration Guide.

Security

Alerts

IIS SMTP server: Spam blacklist IP detected: This alert is generated when blacklisted IP address acesses the server.
IIS SMTP server: AUTH error: This alert is generated when user authetication error happens.
IIS SMTP server: Slow mail flow: This alert is generated when mail process (MAIL,RCPT,EHLO,AUTH,DATA) taking unusual time delay while process.
IIS SMTP server: EHLO and HELO contiuous request: This alert is generated when server receives unusual number of EHLO or HELO packets.

Reports

IIS SMTP server-EHLO and HELO request details: This report provides information about EHLO and HELO request from clients.
IIS SMTP server-AUTH error details: This report provides information about user authenticaion errors and failures.

Operations

Reports

IIS SMTP server-All traffic report: This report provides information about the mail traffic from SMTP server.
IIS SMTP server-Sender and receiver report: This report provides information about mail sender and receiver details.

Compliance

Reports

IIS SMTP server-Error report: This report provides information about errors generated by server methods (MAIL,RCPT,EHLO,AUTH,DATA).

Scope

The configuration details are consistent with EventTracker version 8.x and later, IIS SMTP server manager 6.0 and later.

Documentation:

For more information please refer to the Integration guide