This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question on SPX email and logging

A question about the way Sophos UTM SPX flag emails for encryption and where can we see from the back end or logs why a simple email is still being flagged?


I checked the DLP section and none of the items under Sophos CCL rules are checked that matches the subject or the body of the email that is being flagged for SPX encryption.

Also where in the logs I will see why a specific email has been flagged for encryption and for what specific rule? 

SMTP proxy logs doesnt seem to show anything about it. Thank you!


This thread was automatically locked due to age.
Parents
  • Please show the SMTP log lines that include the email in question.  Also, click on [Go Advanced] and attach a picture of the complete 'Data Protection' tab in 'SMTP' with 'Show selected only' checked.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Please show the SMTP log lines that include the email in question.  Also, click on [Go Advanced] and attach a picture of the complete 'Data Protection' tab in 'SMTP' with 'Show selected only' checked.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data