Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 26 subscribers
  • Views 1286 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

E-Mail Quarantine settings / multiple domains same account

Janek Haessler

Hello everyone,

at first: We are using FW SFOS 18.0.3 MR-3

I have several questions regarding the quarantine settings. I activate it within "Protect -> Email -> Quarantine settings"
"Send test email" is working

1) Does the user become only a mail when there is a mail in quarantine? Or also when there are "0" new mails

2) We have several domains-alias for the the same mailbox (so ABC.org .. ABC-CO.org). Does this work also if the "firstname.surname" prefix of the mailaddress is still the same (eg: firstname.surname@ABC.org & firstname.surname@ABC.CO.org) 

3) I read in older topics that the quarantine only works for users created on the XG - our users authenticate via LDAP from Microsoft AD (which is also working fine. but here is the same problem - our internal domain is not the same as our external)

Thanks in advance

Janek Haessler



This thread was automatically locked due to age.
Parents
  • 0

    This setup is not easy to deploy within XG. XG threats only user within XG as a potential digest user. Therefore you need a user to send the digest to. 

    I always recommend a migration to Central Email to cover multiple scenarios. Central Email can do this without any problems plus it integrate multiple attack scenarios like business email compromise and time of click. It is the more protective tool. 

  • +1 in reply to LuCar Toni

    Thanks for your reply LuCar Toni.

    Thats not the answer I wanted to hear but ok Disappointed

    I made a crosscheck and it works with local created users when I add the mail addresses with the "," as separator . The funny thing is that now i see the mails that was quarantined  when the user doesn't exist locally Slight smile - ok, now I have to create 200 users manually without AD password sync.

    Edit:

    Check again. I can edit the AD User in sophos aswell and add the mail address there too. Not the best way but I can use the AD functionality

Reply
  • +1 in reply to LuCar Toni

    Thanks for your reply LuCar Toni.

    Thats not the answer I wanted to hear but ok Disappointed

    I made a crosscheck and it works with local created users when I add the mail addresses with the "," as separator . The funny thing is that now i see the mails that was quarantined  when the user doesn't exist locally Slight smile - ok, now I have to create 200 users manually without AD password sync.

    Edit:

    Check again. I can edit the AD User in sophos aswell and add the mail address there too. Not the best way but I can use the AD functionality

Children
  • +1 in reply to Janek Haessler

    You could use a trick here. In XG you can specify the field, which is used for Email. You could use a AD attribute field, which is currently unused, and import those emails into this field. Then import this field into XG. 

    But as i mentioned: To protect yourself against modern email threats, take a look into Central Email.