If the Central Management System appliance is configured to send system email notifications, by default it sends notifications about Network Security HA events. The nxha-health-failure event generates an email notification when a health checks fails (for example, if there is a configuration setting mismatch). The notification is sent to recipients who are configured to receive "info" level events.
Note
Trellix recommends that you configure event notification recipients only on the Central Management System appliance, not on the Network Security appliances in the HA pair.
For information about configuring recipients and determining the notifications they receive, see the Central Management System Administration Guide.