Enter the name of the person from whom notifications should be sent. This is the name that will appear in the email From field. Maximum length: 1024 characters.

Type the subject of the notification. This appears in the email Subject: line. Click the right arrow to choose variables to include in the subject, such as "This is to notify you that your message was %Action% because it breached corporate policy." Maximum length: 4000 characters.

Click Edit to select to select business units or directory entries.

Select Additional email addresses then click the right arrow to select a dynamic recipient that varies according to the incident. For example, you can choose to send the notification to the policy owners, administrators, source, or source's manager. Select the variable that applies, such as %Policy Owners%. Separate multiple addresses with commas.

To support this feature, you must create an email account for the TRITON AP-DATA system in Exchange. To avoid reconfiguration, make sure the credentials assigned to this mailbox do not expire. Once done, navigate to Settings > General > Mail Servers and configure the incoming mail server. Use this mailbox for the system email address.

See the knowledgebase article, "Releasing blocked email in TRITON AP-DATA" for instructions on setting up the release by reply capability. You must configure options in both TRITON AP-DATA and Microsoft Exchange to enable it.