cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Email Protection rule configuration

Jump to solution

Hi,

How to configure email protection rule to block any mails that contains external  receipts, only allow and monitor mails that receipts only contains internal receipts. Thanks.

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Email Protection rule configuration

Jump to solution

Hi @User21257322  ,

Thank you for choosing McAfee Support Community.

1. Login ePO - > DLP Policy Manager - > Create a Ruleset or Modify existing Rule set in which you would like to add email protection rule. 

2. Create new email protection rule in a ruleset by Actions - > New Rule- > Email Protection and name the rule as "External Email protection ".

3. In the below image I have configured when any one of the email element contains keyword Confidential from Built-in Classification (However you can finetune/modify the classification based on your requirements)

 DLP Email Rule.PNG

4. To allow when the same email to send to internal employees id add your domain name to exceptions as below.

DLP Email exception.PNG

5. Click on 3dots to create a definition for the internal domain name equals as per below snippet so this will allow the same email when sent to "xyz.com" domain .

internal exceptions.PNG

6. Set Reaction to "Block" . 

7. The above configurations will block email with Confidential keywords in any email elements to external Domain and exempt when the same is to send to internal Domain. If you want to monitor email send to internal domains follow below steps. 

8. Create new rule as per step 2 and select "Recipient list Includes" as "at least one recipient belongs to one of the email address list " and select " Internal Domain List" created in Step no 5.

internal email contact.PNG

9. Without adding any exceptions goto "Reactions" tab and set the rule to be "No action" to just Monitor. 

 

Was my reply helpful?If you find this post useful, Please give it a Kudos!

Please don't forget to select "Accept as a solution" in my reply and together we can help other members?

Regards
Subramanian B
McAfee Employee

View solution in original post

1 Reply
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Email Protection rule configuration

Jump to solution

Hi @User21257322  ,

Thank you for choosing McAfee Support Community.

1. Login ePO - > DLP Policy Manager - > Create a Ruleset or Modify existing Rule set in which you would like to add email protection rule. 

2. Create new email protection rule in a ruleset by Actions - > New Rule- > Email Protection and name the rule as "External Email protection ".

3. In the below image I have configured when any one of the email element contains keyword Confidential from Built-in Classification (However you can finetune/modify the classification based on your requirements)

 DLP Email Rule.PNG

4. To allow when the same email to send to internal employees id add your domain name to exceptions as below.

DLP Email exception.PNG

5. Click on 3dots to create a definition for the internal domain name equals as per below snippet so this will allow the same email when sent to "xyz.com" domain .

internal exceptions.PNG

6. Set Reaction to "Block" . 

7. The above configurations will block email with Confidential keywords in any email elements to external Domain and exempt when the same is to send to internal Domain. If you want to monitor email send to internal domains follow below steps. 

8. Create new rule as per step 2 and select "Recipient list Includes" as "at least one recipient belongs to one of the email address list " and select " Internal Domain List" created in Step no 5.

internal email contact.PNG

9. Without adding any exceptions goto "Reactions" tab and set the rule to be "No action" to just Monitor. 

 

Was my reply helpful?If you find this post useful, Please give it a Kudos!

Please don't forget to select "Accept as a solution" in my reply and together we can help other members?

Regards
Subramanian B
McAfee Employee

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community