Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Services
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

Database Security

Prevent unauthorized access and exceed compliance requirements.

Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Microsoft Security
Unlock the full power of Microsoft Security
Offensive Security
Solutions to maximize your security ROI
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Loading...
Loading...

FAQ: Why are message digests incorrectly being delivered to external addresses?

Expand / Collapse


This article applies to:

  • Trustwave MailMarshal (SEG) 6.X, 7.X
    • Note changes in 8.X and above
  • Trustwave ECM/MailMarshal Exchange 7.X

Question:

  • Why are message digests for spam being delivered to external addresses?

Information:

This problem can occurs when SEG or ECM folders and rules are not correctly configured.

In SEG 6.X and 7.X, digests are always sent to the message recipient (unless you specify "send all digests to a single recipient"). If a folder contains both "inbound" and "outbound" messages (both messages with internal recipients, and messages with external recipients), then some digests could be sent to external addresses.  

 

  • Note: SEG 8.X and above allows you to configure digests of outgoing mail, sent to the internal sender.

 

Procedure:

To ensure that message digests are only sent to internal email addresses, ensure that any folders that will be digested for the recipients contain only incoming messages. Rules that quarantine outbound messages should use other folders.

If you want to notify internal senders about blocked outgoing email, use a "notification message" rule action.

Self-Management option:

You can include folders with outbound messages in the folders visible through the Spam Quarantine Management website. For each folder that you want to include, edit the folder properties and choose "Enable end-user management for this folder."

  • For rules that apply to incoming messages, always use a folder that has the setting Folder is used to manage messages addressed to a user (or inbound messages).
  • For rules that apply to outgoing messages, always use a folder that has the setting Folder is used to manage messages addressed from a user (or outbound messages).
If you want to apply the same criteria to both inbound and outbound messages, use two rules and two folders.

Notes:

  • SEG and ECM default rules are correctly configured and do not send message digests to external addresses. To send external digests in 8.X and above you must create a new digest that applies to the appropriate folders.
  • Current versions of SEG/MailMarshal, and ECM/MailMarshal Exchange 7.X, allow you to select user groups when digesting, which provides additional flexibility.
  • You can digest outgoing messages in versions prior to 8.X if you choose "Send all digest notifications to one recipient."

To contact Trustwave about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.