i was configure data filtering and it works.
But i face problems with the mailing.
When the the fw match pattern it blocks it, but the email stuck in outbox queue , and the user can not send/receive other emails until the mail is deleted from the queue.
Can we achieve some kind of silent drop, so for the client to look like the email was send ?
Perhaps we need to discuss the location of where your FW is located at, in relation to the mail server.
If using SMTP, then we would want the mail to be sent from the Outlook (presumption) client to the mail server, and then when the mail server attempts to send the mail to the destination, that the FW is between the mail server and the internet (perimeter) to prevent exfiltration data from the mail server.
But if I am wrong (probably... :P) then the DF profile only allows for ALERT and then BLOCK, there is not option for silent drop.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!