CVE-2024-3400: PAN-OS Command Injection Vulnerability in GlobalProtect Gateway. Learn More
Get access to immediate incident response assistance.
In Exchange mailflow, Distribution Groups are expanded into the individual recipient addresses before a message is passed to agents such as the ECM Exchange Agent. ECM User Matching will not match the distribution group address because it is not in the list of addresses provided in the meta-data of the message.
However the message file includes the text of the To: header and other headers of the message. These text headers do provide the original recipient information, including the SMTP address associated with a Distribution Group. You can use ECM Header Matching rule conditions to match Distribution Groups.
To set up a header matching condition:
To contact Trustwave about this article or to request support:
This is a bot-free zone. Please check the box to let us know you're human.
Download Now
Read complimentary reports and insightful stories in the Trustwave Resource Center
One of our sales specialists will be in touch shortly.