topic Re: Can PaloAlto block content of subject of email? in General Topics

Can PaloAlto block content of subject of email?

binh — Sun, 03 Oct 2010 10:48:06 GMT

For example: I have config the feature data fitlering for block data pattern such as :" .*Salary, .*Confidential". When I send email out with subject: "Salary or Confidential", can PaloAlto detect and block this email? And can PaloAlto detect and block content of body, attached file of email when I send out with content which has word such as : "Salary, Confidential". Can PaloAlto block according to protocol such as : SMTP, IMAP, FTP, HTTP,...etc?

Pls, help me to answer it ASAP.

Tks for helping.

Re: Can PaloAlto block content of subject of email?

migration — Sun, 03 Oct 2010 11:15:12 GMT

>For example: I have config the feature data fitlering for block data pattern such as :" .*Salary, .*Confidential". When I send email out ?>with subject: "Salary or Confidential", can PaloAlto detect and block this email? And can PaloAlto detect and block content of body,

Yes.

>attached file of email when I send out with content which has word such as : "Salary, Confidential". Can PaloAlto block according to

Yes.

>protocol such as : SMTP, IMAP, FTP, HTTP,...etc?

Yes we will do check for SMTP, IMAP, FTP and HTTP.

-- Sandeep

Re: Can PaloAlto block content of subject of email?

binh — Sun, 03 Oct 2010 11:37:39 GMT

Hi Sjain,

Are you sure?

Tks for reply.

Re: Can PaloAlto block content of subject of email?

migration — Sun, 03 Oct 2010 11:42:24 GMT

Yes. It should work unless the email is using some special encoding that we don't currently support.

Thanks,
Sandeep

Re: Can PaloAlto block content of subject of email?

binh — Sun, 03 Oct 2010 12:44:18 GMT

May I ask you. Can PaloAlto detect and block when I transfer file which has the content, including words such as: "Salary, Confidential" via chat yahoo messenger or skype?

Tks for helping.

Re: Can PaloAlto block content of subject of email?

migration — Sun, 03 Oct 2010 17:24:31 GMT

Yes for yahoo IM file transfer but no for skype file transfer (skype uses a proprietary encryption for sending files).

Regards,

Sandeep

Re: Can PaloAlto block content of subject of email?

networkadmin — Mon, 04 Oct 2010 17:19:46 GMT

How does it handle the block from the SMTP perspective? If I send a message and it gets blocked do I get notified or does the PAN just drop the connection?

Re: Can PaloAlto block content of subject of email?

migration — Tue, 05 Oct 2010 00:40:29 GMT

We will drop the connection... currently no notification is provided to the user but there are plans to add such functionality in future.

Also, note that if SMTP connection is dropped by any intermediate network device (such as in this case by the firewall) SMTP server is going to retry transmitting the email till it exhausts the maximum retries configured.

Thanks,
Sandeep