Modes of operation of Kaspersky Secure Mail Gateway

Kaspersky Secure Mail Gateway can run in normal mode, limited traffic mode, or certified mode.

In normal mode, Kaspersky Secure Mail Gateway is allowed to access the Internet and connect to the following servers outside the IT infrastructure of your organization:

KSN database update servers.
DNS servers.
Kaspersky Secure Mail Gateway database update servers.

In limited traffic mode, Kaspersky Secure Mail Gateway is not allowed to access the Internet and connect to servers outside the IT infrastructure of your organization.

In limited traffic mode, the settings of Kaspersky Secure Mail Gateway components that require Internet access take the following values by default:

KSN usage is disabled.
SPF, DKIM, and DMARC message authentication is disabled. Connection to DNS servers is prohibited.
The Enforced Anti-Spam Updates service is disabled in the settings of the Anti-Spam component.
Kaspersky Secure Mail Gateway receives database updates from Kaspersky Security Center or a local source of Kaspersky Secure Mail Gateway database updates.

In certified mode, Kaspersky Secure Mail Gateway is not allowed to access the Internet and connect to servers outside the IT infrastructure of your organization. Besides, when Kaspersky Secure Mail Gateway operates in certified mode, the administrator is not allowed to view the event Log from the administrator's menu of Kaspersky Secure Mail Gateway Management Console.

You can select the certified mode of operation of Kaspersky Secure Mail Gateway when deploying the image of a Kaspersky Secure Mail Gateway virtual machine.