Skip to main content

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

LevelBlue Named Official Cybersecurity Advisor of the PGA of America. Learn more

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

HOWTO: How do I set up and use MailMarshal Email notifications?

Expand / Collapse


This article applies to:

  • MailMarshal (SEG)
  • MailMarshal ECM/MailMarshal Exchange

Question:

How do I set up and use MailMarshal Email notifications?

Procedure:

Using Email Notifications

Email Notifications can provide a very powerful tool to the Mail Administrator.

Some examples of the use of Email Notifications are:

  • Notify the sender and recipient when a virus is detected. This can be used to let users know that they have a virus problem.
  • Send a message to the administrator when a virus is detected. This message can contain extensive information on the original message, such as sender, recipient, etc.  It can also include the Message log and Virus log so that you can immediately familiarize yourself with the problem.
  • Redirect a complete copy of the message to an alternative Email address. This could be used, for example, in conjunction with a rule to detect inappropriate words or images. When such an Email is detected, then MailMarshal can be set up to forward a copy to the Administrator.

Setting up Email Notifications

A notification Email is based on an Email Template. The template determines what information is included in the notification message. You then need to set up a rule to use the Email Template when triggered.

Note:  MailMarshal ships with several Email Templates that are ready for use. Edit any of these to get ideas on creating your own templates.

  1. Create an Email template.

    In the MailMarshal Configurator or Management Console, navigate to Policy Elements | Email Templates, and create a new email template. The template can use variables containing information from the original Email message, such as the Sender, Recipient, Subject, etc. See the article linked below for a list. To see a list of common variables used in any field, type '{' while editing the field -- this opens a list of variables available for that field. Select the variable(s) that you require.

    NOTE: In early versions of MailMarshal '%' displayed the available variables.

    An example of variable use:

    This message was sent by {Sender}

    If you want to preserve the look of the original mail message, you will probably find it useful to match the appropriate variables with the relevant fields. Thus, in the Subject Field of the template you would use the variable %Subject%.

    If you want to include attachments with the Notification, simply select this in the Attachments field of the template.  Note that you have the option of including the original message as an attachment.  Another common use is to attach the virus log for the message if the template will be used with a virus scanning rule. 
     
  2. Create a rule to use your Email Template.

    Your Email Template does nothing unless you create a rule that uses it.  To create a new rule, select the conditions that you want the rule to trigger on.  Then, in the Actions part of the rule, select Send a Notification Message, and choose the appropriate template for the rule.

    An example of a rule:

    Where a message arrives
    Where message is outgoing
    Where message contains a virus
    Send an Administrator Virus Notification; User Virus Outbound Notification
    And Move the message to virus

    You may have noticed that this rule initiates two Notification messages. The first to the Administrator could contain information about the virus and the user(s) sending the virus. The second notification could send a warning to the sender and recipient that the message was blocked due to an infection.

    Tip: Generally you would send different notifications for inbound and outbound events.  For instance, you would not send a virus notification to an external recipient if the message originated within your organization.

Variables that can be used in Email Templates

For a list of the variables that can be used in email templates, please see the following LevelBlue Knowledgebase articles: 

  • Q10915: What Variables can I use in MailMarshal (SEG)?

This article was previously published as:
NETIQKB29743
Marshal KB90

To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.