I have some weeks with MEG 7.5 and I have doubts about the concept GTI reputation vs URL reputation.
As I understand GTI is related to IP address, and URL for domains names, am I right? If I am right, my quiestion is:
How can I apply a whitelist a email Blocked: Message Reputation?
I call McAfee support and they explain me, I need to add a new policy and disable the GTI, but I got 2 questions for that:
My analysis: Anyone knows, how can exclude a IP address for Blocked Message Reputation?
I really appreciat your opinion and your suggestion to my doubt.
They are correct, you will need to create a new policy that does not use GTI for that sending domain (or preferably IP address). Yes, this does create somewhat of a gap in the GTI coverage, but that is exactly what a whitelist is.
The policy can be specified to only apply for specific users and specific sending domains, that way the opening is as small as needed.