Top
ServerView Resource Orchestrator V3.4.0 Automatic Quarantining Function User's Guide
FUJITSU Software

2.5.4 Definition File for Enabling Notification

This section explains the definition file for enabling notification of switchover to the quarantine network.

This definition is only enabled when message notifications are enabled using the msgnotice command.

For details on the msgnotice command, refer to "4.9 msgnotice".

Purpose

Regarding the notification when actions are executed after infection with malware is detected, define the message content in this definition file. When notification has been enabled, the notification displayed on the user window will use the messages defined in this definition file.

If this definition file does not exist, then the default message will be sent. In addition, if definition is not performed for each action, then the default message will be sent.

However, it not necessary to restart the services of the Resource Orchestrator manager after editing this type of definition file.

Format of the Definition File

Location of the Definition File

[Windows Manager]

Installation_folder\SVROR\Manager\etc\customize_data

Name of the Definition File

avmgr_msgnotice.rcxprop

Character Code

[Windows Manager]

UTF-8

Line Break Code

[Windows Manager]

CR/LF

Format of the Definition File

In the definition file, specify each line in the following format:

Key = Value
Definition File Items

The items to specify in the definition file are given below.

Item Key Value
Default Title message_title A string of 1 to 32 characters (Both double-byte and single-byte characters can be used)
Default Body message_text A string of 1 to 256 characters (Both double-byte and single-byte characters can be used)
Title Displayed when Quarantining message_title_quarantine A string of 1 to 32 characters (Both double-byte and single-byte characters can be used)
Body Displayed when Quarantining message_text_quarantine A string of 1 to 256 characters (Both double-byte and single-byte characters can be used)
Title Displayed when Rebooting message_title_reboot A string of 1 to 32 characters (Both double-byte and single-byte characters can be used)
Body Displayed when Rebooting message_text_reboot A string of 1 to 256 characters (Both double-byte and single-byte characters can be used)
Title Displayed when Quarantining and Rebooting message_title_quarantine_reboot A string of 1 to 32 characters (Both double-byte and single-byte characters can be used)
Body Displayed when Quarantining and Rebooting message_text_quarantine_reboot A string of 1 to 256 characters (Both double-byte and single-byte characters can be used)

The default values for the message title and body are as follows.

Item Value
Title Warning!
Body

Security threat detected.

This virtual application/desktop will be disconnected for safety reasons.

Example Definition File

An example definition of user-defined messages is given below.

message_title=Warning! 
message_text=A threat to security has been detected.
message_title_quarantine=Quarantine! 
message_text_quarantine=A threat to security has been detected.\ r\nThe virtual application/desktop is being disconnected to ensure safety.
message_title_reboot=Reboot! 
message_text_reboot=A threat to security has been detected.\ r\nThe machine will be restarted to ensure safety.

Note

  • If the notification received for a message that has been set using multibyte character is displayed as garbled characters, it is recommended to change the content of the message to single-byte characters.
  • If there are multiple lines of message text in the definition, only the first line is used.
  • It is possible to specify a line break in the body of the message by inserting the line break character string "\r\n". Line break character strings are treated as being two characters in length. Depending on the OS of the terminal being used, line breaks in the title may not be displayed correctly.
  • If a character string that is longer than the maximum allowed length for the message text character string is specified, the message up to the maximum allowed character string length will be sent. If the character string is empty, or the key has been omitted, the default message will be sent.