Deployment Guide › Email Server Agents › Set Up Server-side Interactive Warning Messages › Deployment Procedure for Interactive Warnings › Create a Compliance Release Mailbox for IIS SMTP Agents

Create a Compliance Release Mailbox for IIS SMTP Agents

IIS SMTP agents differ from Exchange server agents in that there is not normally a mail server associated with the SMTP service, unlike in Exchange Servers, which are available to create a ‘Compliance Release’ mailbox on.

Interactive warnings work as follows with the IIS SMTP agent:

• If an email sent by a user triggers a warning, the agent that intercepted the email sends the user a warning message.
• To release the original email, the reply to that warning must arrive back at the agent that is holding the original email pending.

  With the Exchange server agent, that is achieved by creating a mailbox (the ‘Compliance Release’ mailbox) on the Exchange Server. Replying to the warning message automatically sends the reply to the ‘Compliance Release’ mailbox. The holding agent is guaranteed to receive the reply because the mailbox is hosted by the Exchange Server which the agent serves (with Exchange 2007 or 2010, or by multiple agents in the case of Exchange 2007 or 2010, one of which will be the holding agent).

  With the IIS SMTP agent, there are two different ways to make sure that the reply arrives at the holding agent:

  • Configure SMTP routing so that emails sent to the ‘Compliance Release’ mailbox address from the managed users are routed to the IIS server hosting the agent (or to one of the IIS servers hosting agents, in the case of multiple IIS servers serving the same SMTP routes). You do not technically need a mailbox with that solution.
  • Install a Mail Server role on the IIS server, and create a mailbox to serve as the ‘Compliance Release’ mailbox. Make sure to configure the Mail Server for the correct SMTP routing.

    Note: If multiple IIS servers are deployed for load-balancing purposes to serve the same SMTP route(s), only install a Mail Server role on one of the IIS servers.

  To enable CA DLP to identify emails destined for the ‘Compliance Release’ mailbox, this mailbox (or address, if there is no actual mailbox) must have ‘cadlp.’ as the first element of its SMTP address. For example:

  cadlp.<IISServer>@<YourDomain>