Notifications

Email notifications

1. Log on to the product console. In the navigation pane on the left, choose Settings > Notifications.

2. Create a custom policy. The IoT Security Operations Center sends a daily security report that contains data from the previous day to the specified email addresses at a fixed time.

Receive webhook messages

1. Set up a webhook server and generate a webhook URL.

2. Log on to the product console. In the navigation pane on the left, choose Settings > Notifications. Click Active Push.

3. Enable Active Push.

4. Enter the webhook URL.

5. Optional: Enable the signature key. After you enable this option, copy the signature key and paste it into the signature key settings on your webhook server. The signed information is passed as a URL parameter in the following format: https://webhook url?sign=signed_information. The signature verification algorithm is Hmac.

6. Optional: Enable the signing certificate. After you enable this option, paste the content of the PEM-formatted certificate into the CA certificate configuration.

7. The IoT Security Operations Center sends webhook messages in JSON format. The following is an example:

{
  "time": 12344444,
  "uuid": "b9febdc3-bb83-11ea-a813-00163e09c6c0",
  "asset": {
    "assetUuid": "454859-kkdf99-didfidi-iiyy",
    "ip": "192.168.1.1",
    "mac": "1c:36:bb:ed:23:f2",
    "productName": "Air_Cleaner",
    "deviceName": "Device_001"
  },
  "type": "risk",
  "name": "Vulnerable Ports",
  "severity": "LOW",
  "description": "The target device (192.168.1.1 - 1c:36:bb:ed:23:f2) has vulnerable port 22 open. If this port is not required for business or device operations, it increases the attack surface of the device and the current network.",
  "suggestion": "Determine if this open port is required for your business or device. If the port is not necessary, notify the device administrator to close it."
}