How do I set up and use MailMarshal Email notifications?

This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

Question:

How do I set up and use MailMarshal Email notifications?

Procedure:

Using Email Notifications

Email Notifications can provide a very powerful tool to the Mail Administrator.

Some examples of the use of Email Notifications are:

• Notify the sender and recipient when a virus is detected. This can be used to let users know that they have a virus problem.
• Send a message to the administrator when a virus is detected. This message can contain extensive information on the original message, such as sender, recipient, etc.  It can also include the Message log and Virus log so that you can immediately familiarize yourself with the problem.
• Redirect a complete copy of the message to an alternative Email address. This could be used, for example, in conjunction with a rule to detect inappropriate words or images. When such an Email is detected, then MailMarshal can be set up to forward a copy to the Administrator.

Setting up Email Notifications

1. Create an Email template.
   
   In the MailMarshal Configurator or Management Console, navigate to Policy Elements | Email Templates, and create a new email template. The template can use variables containing information from the original Email message, such as the Sender, Recipient, Subject, etc. See the article linked below for a list. To see a list of common variables used in any field, type '{' while editing the field -- this opens a list of variables available for that field. Select the variable(s) that you require.
   
   NOTE: In early versions of MailMarshal '%' displayed the available variables.
   
   An example of variable use:
   
   This message was sent by {Sender}
   
   If you want to preserve the look of the original mail message, you will probably find it useful to match the appropriate variables with the relevant fields. Thus, in the Subject Field of the template you would use the variable %Subject%.
   
   If you want to include attachments with the Notification, simply select this in the Attachments field of the template.  Note that you have the option of including the original message as an attachment.  Another common use is to attach the virus log for the message if the template will be used with a virus scanning rule. 
    
2. Create a rule to use your Email Template.
   
   Your Email Template does nothing unless you create a rule that uses it.  To create a new rule, select the conditions that you want the rule to trigger on.  Then, in the Actions part of the rule, select Send a Notification Message, and choose the appropriate template for the rule.
   
   An example of a rule:

Where a message arrives
Where message is outgoing
Where message contains a virus
Send an Administrator Virus Notification; User Virus Outbound Notification
And Move the message to virus

   You may have noticed that this rule initiates two Notification messages. The first to the Administrator could contain information about the virus and the user(s) sending the virus. The second notification could send a warning to the sender and recipient that the message was blocked due to an infection.
   
   Tip: Generally you would send different notifications for inbound and outbound events.  For instance, you would not send a virus notification to an external recipient if the message originated within your organization.

Variables that can be used in Email Templates

For a list of the variables that can be used in email templates, please see the following Trustwave Knowledgebase articles: 

• Q10915: What Variables can I use in Trustwave MailMarshal (SEG)?

This article was previously published as:

NETIQKB29743

Marshal KB90