2 Replies Latest reply on Jan 19, 2011 7:02 AM by bwemailsupport1

    DLP Policy

    bwemailsupport1

      May I have some suggestions on how to block certain outgoing email messages?   

       

      I want to block them based on an certain destination email domain.

       

       

       

      Based on the knowledge I have (from several years ago),m this would be an Envelope rule.

       

      But I see that there are "DLP" (data loss prevention) notifications available in this version of Ironmail (6.7.2).

        • 1. Re: DLP Policy
          ijahnke

          DLP notifications only work if the box is connected to a DLP device such as the Mcafee Reconnex DLP.

           

           

          To block outbound messages to a certain domain via envelope analysis:

           

          1. Compliance -> Manage rules -> Add New

               Monitored Field : Recipient

                               Type: Domain

                               Data: <domain>

                            Action: Drop/Quarantine

              Quarantine Type: < the queue you want to quarantine messages to like "content analysis">

                   Action Value: if quarantining then set it to 0

           

          2. Compliance -> Apply Rules -> Add New (if you already have an outbound rule then you dont need to add a new one)

          Apply to: Global

          Directon: Outbound
          Check the enable box for the rule you just created and then click submit.

           

           

          That should take care of it.

          1 of 1 people found this helpful
          • 2. Re: DLP Policy
            bwemailsupport1

            Thanks for the clarification on the DLP feature.   We may implement another vendor's DLP later this year, but we don't have McAfee's solution.

             

             

            I will try your suggestion on blocking the outbound message.