Showing results for 
Search instead for 
Did you mean: 

Is there a way to search the inbound MEG for the Display Names?

We have a situation where we want to search for the following case:

We received a mail from "Kev Josephs" <> when I check the Meg, I can only find it by searching for * and not Kev Josephs

This is a case of repeated misuse of a legit staff members display name. We have enabled SPF checking, so the spoofers cannot use our domain name, but, we continue to get new instances where the domain names are changing

1 Reply
Reliable Contributor marcus69
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: Is there a way to search the inbound MEG for the Display Names?

Dear Mary,

No, there is not. You can only search the sender adresses that have been seen on the smtp envelope. Also this information is stored on the meta data that can be investigated on the Email Gateway reports.

The Adress you are looking for is buried in the mail header. Unfortunately this one is easy to fake or modify, and is very often abused to fool recipients.

You may check the "from" tag on the Mailheader as a criteria for Anti-Spoofing Policies on your Email Gateway in order to get those fakes sorted out.


Explanatory note:

Since 25 Years Microsoft is not able to display the real Email Adress on Outlook when opening a mail, now guess which one is the wrong horse to put the saddle on 😉


Kind Regards,

    Marcus 🙂




More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator