Kaspersky Secure Mail Gateway

Examples of message processing rule configuration

This section contains examples of message processing rule configuration that can satisfy the needs of an organization.

• Letting only users from a specific AD group send external messages

  As a result, message processing rules are configured that allow external messages to be sent by users in a specific Active Directory group and prohibit the same to all other users.

  Create the following rule set:

  1. Create a processing rule for outgoing messages sent by users of a particular Active Directory group.
     1. Select the Use the settings of scan modules mode.
     2. In the list of senders, specify the Active Directory user group that must be able to send messages to external email addresses.
     3. In the list of recipients, enter *.
  2. Create a message processing rule for messages that domain users send to each other.

     If such email traffic does not pass through KSMG, skip this step.

     1. Select the Use the settings of scan modules mode.
     2. In the list of senders, specify all local domains.
     3. In the list of recipients, specify all local domains.
  3. Create a rule that will reject outgoing messages being sent from all internal email domains of the company to any email address.
     1. Depending on your organization's policy, set the Reject without scanning or Delete without notifying the sender mode.
     2. In the list of senders, specify all email domains of your organization.
     3. In the list of recipients, enter *.

  The preset rule is used for processing of incoming messages.

• Configuring rules for disabling the filtering of outgoing messages

  The rule that disables the filtering of incoming messages is configured. Filtering of incoming messages from other domains will continue.

  To do so, create a rule with the following settings:

  1. Select the Use the settings of scan modules mode and disable scanning modules that you do not need.

     For the sake of information security, using the Skip without scanning mode instead is not recommended.

  2. In the list of senders, specify the IP addresses of internal mail servers or local domains for which you do not want to scan outgoing messages.
  3. In the list of recipients on the Email tab, enter *.