Video Screencast Help

Vontu Email prevent catch (block) and release capbility

Created: 09 Sep 2013 • Updated: 25 Sep 2013 | 2 comments
This issue has been solved. See solution.

I am trying to investigate how to set up Vontu prevent for email so when certain emails hit a policy they are blocked and then we can check with management and then go into the system and  release the email to continue to its destination. I know that Symantec DLP cannot do this natively, does anyone have experience with another Symantec product or  3rd party system that could work with DLP and provide catch and release capability? Thanks

Operating Systems:

Comments 2 CommentsJump to latest comment

DLP Solutions2's picture

Astro,,

This can be done with the integration of a MTA that supports Quarantining. The Symantec DLP platform has the capability of modifying the Email Header (can be set to anything), this modification would then be recognized by the MTA for Quarantining. You would then get an email from either the DLP platform or the MTA that there is a message that is awaiting approval.

You would then be able to go to the MTA's login page and release the email to be sent out.

There is pretty seamless integration with Symantec's Messaging Gateway (see check box) and can do this with just about any other MTA that supports Quarantining.

Enclosed you will see how to configure the Response Rule that you would then associate to a policy.

It is pretty simple to do and is based off of Rules that you would have on your MTA.

Hope this makes sense.

If this solves your questions please marked as solved.

Ronak

Capture.JPG

Please make sure to mark this as a solution

to your problem, when possible.

SOLUTION