Email Clients Parent topic

OfficeScan monitors email transmitted through various email clients. OfficeScan checks the email’s subject, body, and attachments for data identifiers. For a list of supported email clients, see the Data Protection Lists document at:
Monitoring occurs when a user attempts to send the email. If the email contains data identifiers, OfficeScan will either allow or block the email.
You can define monitored and non-monitored internal email domains.
  • Monitored email domains: When OfficeScan detects email transmitted to a monitored domain, it checks the action for the policy. Depending on the action, the transmission is allowed or blocked.
    Note
    Note
    If you select email clients as a monitored channel, an email must match a policy for it to be monitored. In contrast, an email sent to monitored email domains is automatically monitored, even if it does not match a policy.
  • Non-monitored email domains: OfficeScan immediately allows the transmission of emails sent to non-monitored domains.
    Note
    Note
    Data transmissions to non-monitored email domains and to monitored email domains where "Monitor" is the action are similar in that the transmission is allowed. The only difference is that for non-monitored email domains, OfficeScan does not log the transmission, whereas for monitored email domains, the transmission is always logged.
Specify domains using any of the following formats, separating multiple domains with commas:
  • X400 format, such as /O=Trend/OU=USA, /O=Trend/OU=China
  • Email domains, such as example.com
For email messages sent through the SMTP protocol, OfficeScan checks if the target SMTP server is on the following lists:
  1. Monitored targets
  2. Non-monitored targets
    Note
    Note
    For details about monitored and non-monitored targets, see Defining Non-monitored and Monitored Targets.
  3. Monitored email domains
  4. Non-monitored email domains
This means that if an email is sent to an SMTP server on the monitored targets list, the email is monitored. If the SMTP server is not on the monitored targets list, OfficeScan checks the other lists.
For emails sent through other protocols, OfficeScan only checks the following lists:
  1. Monitored email domains
  2. Non-monitored email domains