From MetaDefender Drive v4.4.5, My OPSWAT Central Management can automatically email IT and security teams when key events occur on enrolled MetaDefender Drives — enrollment, removal, or an unsafe device detection — enabling faster incident response and seamless integration with downstream ticketing (e.g. ServiceNow).
What you get
- Event-driven email alerts — triggered the moment a device is enrolled, removed, or detected as unsafe.
- Group-based routing — define notification groups and route different events to different recipients.
- HTML or JSON payload — pick the format that fits your inbox or downstream automation.
- Inline scan report link — every unsafe-device email includes a one-click signed Download Report link (valid for 7 days).
CM Setup
Configure these in the My OPSWAT Central Management console.
Create a Notification Group
Go to Settings → Notification Groups and click + Add Notification Group (or open an existing one). Fill in the form:
- Group Name — 1–50 characters.
- Email Format — HTML (human-readable) or JSON (machine-readable for automation).
- Group Members — one email per line; at least one is required.
- Triggers — select MetaDefender Drive from the dropdown, then tick the events you want: Enrolled, Removed by an administrator, Unsafe device detected.
Click Save.
Example notifications
Once configured, group members receive emails the moment a triggered event occurs. Each email is sent from My OPSWAT Central Management with a structured event table.
Outcome 1 — Unsafe device detected
An enrolled MetaDefender Drive returned an unsafe scan result. The email shows Final Verdict: Unsafe Device and a Download Report link (valid for 7 days) to fetch the signed session log for triage.
Outcome 2 — Device enrolled
A new MetaDefender Drive was enrolled into Central Management. The email confirms the device identity (Serial Number, Device Type, Group, Version) and the user who enrolled it — useful for asset tracking and onboarding audit trails.
Troubleshooting
- No email received — confirm the recipient is listed under Group Members and the relevant trigger is ticked; check the recipient's spam folder.
- Wrong format — switch Email Format between HTML and JSON in the Notification Group.
- Download Report link expired — links are valid for 7 days; ask the user to forward the alert sooner, or re-export the report from CM.
- To stop receiving alerts — sign in to My OPSWAT Central Management and adjust Settings → Global → Notifications.