When configuring a Send Email action to notify CounterACT administrators, how do you add endpoint...

Comprehensive and Detailed Explanation From Exact Extract of Forescout Platform Administration and Deployment:

According to the Forescout Administration Guide - Send Email action documentation, to add endpoint-specific host information to a Send Email notification, you should "Edit the 'Message to Email Recipient' Field of the Send Email action Parameters tab, then click 'Tag' to add the desired property value".​

Property Tags in Send Email Action:

According to the Property Tags documentation:​

"Property tags insert endpoint values into condition or action fields, and are replaced by the actual endpoint property value when the field is evaluated."

Property tags allow dynamic insertion of endpoint-specific data into email messages.

How to Add Property Tags to Email:

According to the documentation:​

Edit Send Email Action - Open the Send Email action configuration

Navigate to Parameters Tab - Select the Parameters tab

Edit Message Field - Edit the "Message to Email Recipient" field

Click Tag Button - Select the "Tag" button/option

Choose Property - Select the endpoint property to insert (e.g., IP address, OS, etc.)

Confirm - The property tag is inserted into the message

Example Email Message with Property Tags:

According to the More Action Tools documentation:​

text

Example message:

"Endpoint [IP.Address] with hostname [IP.Hostname]

has failed compliance check for operating system [OS]."

When evaluated:

"Endpoint 192.168.1.50 with hostname WORKPC-01

has failed compliance check for operating system Windows 10."

Available Properties for Tags:

According to the documentation:​

Property tags can reference:

IP Address

MAC Address

Hostname

Operating System

Device Function

User information

Custom endpoint properties

Why Other Options Are Incorrect:

A. Create criteria in sub-rules - Sub-rules don't send email; they're for conditional logic

C. Edit Options > General > Mail settings - This is for global email configuration, not message customization

D. It is not possible - Incorrect; property tags specifically enable this functionality

E. "Keyword tag" - The feature uses "property tags" or "tags," not "keyword tags"

Referenced Documentation:

Send Email action​

Property Tags​

More Action Tools - Property tags section​