0 Replies Latest reply on Nov 24, 2014 8:53 PM by neozl

    Strange Test Email sent by Sample

    neozl

      Dear all,

       

      I have email protection rule, which only blocks tagged document from attaching to the email only. The NB936 belongs to me and I did not send out any email on the dated time 5PM yesterday.

      #81927 even got an attachment “Amir.doc”  which is supposed to be stored as evidence but failed.

       

      Event ID

      Occurred (Endpoint)

      Severity

      Event Type

      User Name

      Computer Name

      Reaction(s)

      Rules

      Classifications

      81927

      2014/11/24 05:00:14 PM

      Info

      DLP: Email Protection

      sample

      NB936

      None

      None

      None

      81926

      2014/11/24 05:00:14 PM

      Info

      DLP: Email Protection

      sample

      NB936

      None

      None

      None

      79555

      2014/11/19 09:11:39 AM

      Minor

      DLP: Email Protection

      ATSEX\pedzlneo

      PEDZLNEO

      Block, Monitor, Notify User

      Email Protection Rule

      Engineering Drawing and Model

      79535

      2014/11/18 05:23:20 PM

      Minor

      DLP: Email Protection

      ATSEX\pedzlneo

      NB388

      Block, Monitor, Notify User

      Email Protection Rule

      Engineering Drawing and Model

       

       

      #79535, 79555 as reference, my rules is specified with Reactions / Rules / Classification. However the sample Test Email has none.

      Could this be some McAfee initiated email or something? Should I be concern?


      DLP 9.3

      ePO 4.6


      Regards,

      Neo