I noticed that any email not whitelisted by Sophos Email Security gateway will be rejected. What about if my organization wants to catch all emails with typos in it? We have a spot to put those so we don't miss any email.
That is not possible. Central needs the mailbox to be synced into the Central console.