2 Replies Latest reply on Jan 19, 2011 7:02 AM by bwemailsupport1

    DLP Policy


      May I have some suggestions on how to block certain outgoing email messages?   


      I want to block them based on an certain destination email domain.




      Based on the knowledge I have (from several years ago),m this would be an Envelope rule.


      But I see that there are "DLP" (data loss prevention) notifications available in this version of Ironmail (6.7.2).

        • 1. Re: DLP Policy

          DLP notifications only work if the box is connected to a DLP device such as the Mcafee Reconnex DLP.



          To block outbound messages to a certain domain via envelope analysis:


          1. Compliance -> Manage rules -> Add New

               Monitored Field : Recipient

                               Type: Domain

                               Data: <domain>

                            Action: Drop/Quarantine

              Quarantine Type: < the queue you want to quarantine messages to like "content analysis">

                   Action Value: if quarantining then set it to 0


          2. Compliance -> Apply Rules -> Add New (if you already have an outbound rule then you dont need to add a new one)

          Apply to: Global

          Directon: Outbound
          Check the enable box for the rule you just created and then click submit.



          That should take care of it.

          1 of 1 people found this helpful
          • 2. Re: DLP Policy

            Thanks for the clarification on the DLP feature.   We may implement another vendor's DLP later this year, but we don't have McAfee's solution.



            I will try your suggestion on blocking the outbound message.