is there any better methods for notification other than emai

[kytemaniac]

Hi,

when I check my OEM, I realize that notifications of database problems include e-mail, SNMP traps and running custom scripts. I wonder if there's any security risk associating with notifications by email. Is there any security issues, how can it be resolved?

thanks.

[Tim...]

Hi.

If the emails are being directed to an email service outside your organization (like gmail), then any information they have is being transmitted over the net, so this does represent an issue. You as an organization need to make a judgement on the content of the notifications and the risk they represent.

Cheers

Tim...

[kytemaniac]

how about company's email in which we can access from anywhere, does it pose a risk?

[Tim...]

Hi.

I can't define what your company sees as risk for you.

I assume you access your email over HTTPS, so that comes with a certain amount of security built in, but the fact this information is available externally from the company means it is still hackable.

You need to sit with your company and define what you consider risk. Look at the content of the types of notification messages and decide what information in them represents a risk. This is not something I can do. It is up to you and representatives of your company to define risk.

Cheers

Tim...

[kytemaniac]

what is usually the method of notification in the industry?

[Tim...]

Hi.

There is no usual. I normally use email, because it is convenient for me. Some people may prefer SMS etc.

Cheers

Tim...