Configuring an RSA Data Loss Prevention Network Internet Content Adaptation Protocol (ICAP) server and Exchange to monitor internal email
2 years ago
Originally Published: 2016-02-22
Article Number
000065097
Applies To
RSA Product Set: Data Loss Prevention
RSA Product/Service Type: Network
RSA Version/Condition: 9.x
Issue
In order to monitor internal email in DLP, the customer will need to configure DLP Network ICAP servers (DLP E-mail Analyzer) and install the Exchange Server plugin.

DLP also analyzes sensitive content for external e-mail using the Network Interceptor. The Network Interceptor monitors outbound e-mail leaving the corporate network. For more information about the Network Interceptor, see the RSA DLP Network - Deployment Guide.

The external mail can be monitored using the interceptor, though if you have a Network sensor it can also monitor SMTP traffic.
Resolution
To be able to monitor internal email, a customer needs ICAP servers and the Exchange plugin to monitor internal email.  The Exchange plugin can be downloaded from the DLP Downloads page on SecurCare Online, under the version of the DLP suite installed in your environment.

External mail can be monitored using the interceptor, though if you have a sensor it can also monitor SMTP traffic. Download the documentation for the internal email solution using the Exchange plugin and ICAP server.
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).