McAfee SMEFCE-AI-DA Administration Guide - Page 162

Email Filtering, my Spam Quarantine Re port?

Page 162 highlights

Email Protection Administrator Guide • Set the User Creation field to Explicit. • Configure your inbound email servers to deny emails received for invalid recipients. Question: How does the user log into the Control Console for the autocreated email address? Answer: One of the following must occur before a user can log into the Control Console: • The user must receive a Spam Quarantine Report and click one of its links before they expire. • The user must request a Set Password email in the Sign in window. • An Administrator can manually set the password for the user in the Control Console. Question: Why does a Web browser open when I try to do anything on my Spam Quarantine Re port? Answer: The Spam Quarantine Report provides an easy-to-use connection into the appropriate feature in the Control Console. The Control Console is a Web-based graphical user interface and is the primary interface to Email Protection. When a user clicks a link in the Spam Quarantine Report, it causes the default Web browser to open, automatically logs the user into the Control Console, and performs the action designated in the clicked link. Email Filtering Question: I've just made a change to my policies; how long does it take before it is active? Answer: Typically, most configuration changes in the Control Console, including policy configurations, Allow and Deny lists, and changes to entity configurations, will take approximately 10-15 minutes before the configuration is effective. Depending on the system architecture, the changes must be stored and then propagated to multiple MTAs performing the processing for Email Protection. Some changes may take longer, such as deleting an entire domain with all its related data. Question: There are emails in my quarantine that I want to always receive. I clicked the "Always Allow" button, but the emails still get caught - What am I doing wrong? Answer: The user-level Allow list does not disable virus, content, or attachment filtering; it only disables the spam filtering. If the email violated any of the enabled policies, it would be filtered even if its sender address was added to the user-level Allow list. In addition, companies often send items in a format that looks like spam that a user may have opted to receive, such as electronic newsletters or emails, causing the email to be quarantined. When a user clicks the Always Allow link in the Spam Quarantine Report or the Spam Message Quarantine window, the sending email address is added to the userlevel Allow list. However, for various reasons, emails of this nature may not always come from the same address every day. Because senders often rotate the address of these types of emails, the same item could be delivered the very next day and still be blocked because the sender address does not match the previous entry in the Allow list. 154 Proprietary: Not for use or disclosure outside McAfee without written permission. November 2012

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168

Email Protection Administrator Guide
154
Proprietary:
Not for use or disclosure outside McAfee without written permission.
November 2012
Set the
User Creation
field to
Explicit
.
Configure your inbound email servers to deny emails received for invalid recipients.
Question: How does the user log into the Control Console for the auto-
created email address?
Answer:
One of the following must occur before a user can log into the Control Console:
The user must receive a Spam Quarantine Report and click one of its links before they
expire.
The user must request a Set Password email in the
Sign in
window.
An Administrator can manually set the password for the user in the Control Console.
Question: Why does a Web browser open when I try to do anything on
my Spam Quarantine Re port?
Answer:
The Spam Quarantine Report provides an easy-to-use connection into the
appropriate feature in the Control Console. The Control Console is a Web-based graphical
user interface and is the primary interface to Email Protection.
When a user clicks a link in the Spam Quarantine Report, it causes the default Web
browser to open, automatically logs the user into the Control Console, and performs the
action designated in the clicked link.
Email Filtering
Question: I’ve just made a change to my policies; how long does it take
before it is active?
Answer:
Typically, most configuration changes in the Control Console, including policy
configurations, Allow and Deny lists, and changes to entity configurations, will take
approximately 10-15 minutes before the configuration is effective. Depending on the
system architecture, the changes must be stored and then propagated to multiple MTAs
performing the processing for Email Protection. Some changes may take longer, such as
deleting an entire domain with all its related data.
Question: There are emails in my quarantine that I want to always
receive. I clicked the “Always Allow” button, but the emails still get
caught – What am I doing wrong?
Answer:
The user-level Allow list does not disable virus, content, or attachment filtering;
it only disables the spam filtering. If the email violated any of the enabled policies, it
would be filtered even if its sender address was added to the user-level Allow list.
In addition, companies often send items in a format that looks like spam that a user may
have opted to receive, such as electronic newsletters or emails, causing the email to be
quarantined. When a user clicks the
Always Allow
link in the Spam Quarantine Report or
the
Spam Message Quarantine
window, the sending email address is added to the user-
level Allow list. However, for various reasons, emails of this nature may not always come
from the same address every day. Because senders often rotate the address of these types
of emails, the same item could be delivered the very next day and still be blocked because
the sender address does not match the previous entry in the Allow list.