000032599 - Configuring an RSA Data Loss Prevention Network Internet Content Adaptation Protocol (ICAP) server and Exchange to monitor internal email

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 5Show Document
  • View in full screen mode

Article Content

Article Number000032599
Applies ToRSA Product Set: Data Loss Prevention
RSA Product/Service Type: Network
RSA Version/Condition: 9.x
IssueIn order to monitor internal email in DLP, the customer will need to configure DLP Network ICAP servers (DLP E-mail Analyzer) and install the Exchange Server plugin.
DLP also analyzes sensitive content for external e-mail using the Network Interceptor. The Network Interceptor monitors outbound e-mail leaving the corporate network. For more information about the Network Interceptor, see the RSA DLP Network - Deployment Guide.
The external mail can be monitored using the interceptor, though if you have a Network sensor it can also monitor SMTP traffic.
ResolutionTo be able to monitor internal email, a customer needs ICAP servers and the Exchange plugin to monitor internal email.  The Exchange plugin can be downloaded from the DLP Downloads page on SecurCare Online, under the version of the DLP suite installed in your environment.
External mail can be monitored using the interceptor, though if you have a sensor it can also monitor SMTP traffic. Download the documentation for the internal email solution using the Exchange plugin and ICAP server.

Attachments

Outcomes