Scanned ATD file result link back to attachment in what email?

[J1mX1]

We are using MSME, TIE and ATD. Attachments scanned by our ATD I don't seem to be easily link back to a specific email? Any advise on how this can be done?

Are there logs in TIE including this data or do these just reference by hash and origin of where file came from e.g. mail server IP? If so might this link between email and attachment only be visible further back up the receiving chain?

[hsadi]

Hi J1mX1,

You need to have an email gateway that can route emails to ATD, as an example Cisco IronPort Email Gateway. Without an email gateway you won't be able to forward emails to ATD.

Please tell us your network diagram, or the flow of your emails to understand the issue you are having.

Best regards,

[J1mX1]

Hi,
Yes, that is our set up. Cisco IronPort email gateways route email to our ATD. I can search the IronPort manually for specific email details e.g. by sender. I don't though know how to find from an ATD alert of a scanned attachment the email it came from?

[hsadi]

Hi J1mX1,

To search for an email by sender/receiver or other criteria, you need to go to:

ATD UI > Analysis > Email Reports > Then in serach box, highlighted in red, type the sender or receiver, then click Search button to display all emails.

Please check the attached screenshot for more details.

Hope this helps,