Set up email alerts for Patient 0 events
Configure Zscaler Internet Access product to identify and scan for unknown, potentially malicious files, such as Patient 0 events so that you can protect your network from malicious files.
Before you begin
Role required: sn_si.admin, Zscaler Internet Access admin
About this task
Patient O is an alert class that includes an unknown file that has been permitted to download but is found to be malicious. The patient 0 event is classified as critical. You can set up the ServiceNow AI Platform to receive email alerts at regular intervals for Patient 0 events.
Procedure
Navigate to All > System Mailboxes > Administration > Email Properties.
In the Inbound Email Configuration section, select the Email receiving enabled option.
Select Save.
Navigate to System Mailboxes > Administration > Email Accounts.
Select the ServiceNow SMTP email account.
Note the user name. The user name that is identified here is the ServiceNow AI Platform email address that you use to configure in Zscaler for Patient 0 alerts.
Log in to the Zscaler Internet Access administration portal.
Note: For more information on the Zscaler Internet Access administration portal, see the Zscaler documentation.
Navigate to Administration > Alerts > Publish Alerts.
Select Add Alert Subscription.
On the form, fill in the fields.
Field Description Email ServiceNow AI Platform SMTP account email address. Description Field for adding more details about the Patient 0 alerts. Select Save.