Previous Topic: Notifications for Blocked or Quarantined EmailsNext Topic: Detecting URLs in Traffic Crossing the Network Boundary


Flag Emails as ‘external’

The NBA is explicitly designed to capture external emails, sent from inside your organization and destined for the Internet. Therefore, one of the simplest ways to review NBA emails is to search for external emails. This requires a change in your user policies. Specifically, you need to edit the Internal Emails setting; find this in the \System Settings\Definitions policy folder.

How does this setting work? CA DataMinder flags events as internal when all the recipient addresses in an outgoing email match the specified Internal Emails address pattern. By implication, any emails where one or more recipients do not match this address pattern are flagged as external.