Previous Topic: Configure Policy Engines to Detect Embedded Content EmailsNext Topic: Detect Other Embedded Content


Automatic IM and Bloomberg Detection

By default, policy engines can detect ‘IM’ EML emails generated by Cnv2email.exe and ‘Bloomberg’ EML emails generated by BB2email.exe. If you only need policy engines to detect and process these event types, you do not need to modify the default values for the Embedded Message Identification policy setting!

Detecting Embedded IM Conversations

By default, machine policy is configured to automatically identify IM conversations embedded in EML emails generated by Cnv2email.exe and to set the event type to ‘embedded IM’ and extract the IM network from the relevant x-headers. The Embedded Message Identification policy setting defaults to:

IM:where "X-ORCH-Network" ExtractIMNetwork "[\"%all%\"]"

Important! Do not change this value! The "[\"%all%\"]" extracts the relevant text string from the X‑ORCH-Network x-header.

Detecting Embedded Bloomberg Messages

By default, machine policy is configured to automatically identify Bloomberg messages embedded in EML emails generated by BB2email.exe and set the event type to ‘Bloomberg’. The Embedded Message Identification policy setting defaults to:

BB:where "X-ORCH-MessageType" is "Bloomberg"

Important! Do not change this value!