Email Audit - Alibaba Mail - Alibaba Cloud Documentation Center

This topic describes how to set email audit rules.

What is Email Audit?

The emails sent by enterprise employees may contain confidential information such as business data and trade secrets. If some employees do not understand the confidential scope of the information, they may accidentally disclose confidential information in the emails. For data security and information security, enterprises can set up an email audit process. The auditor has the audit permission to review emails within the specified scope. If the emails of a specified account or department member meet the preset conditions, the auditor must approve the emails before they can be sent to the recipient's mailbox.

Note

1. The auditor supports only employee accounts and does not support email groups.

2. Only one monitor can be set for each audit rule.

Procedure:

1. Use postmaster account login Alibaba Mail and enter domain management page> Security> Email Audit.

2. Click Add Emil Audit Rule and configure the rule as required. After the information is complete, click Save.

Settings	Description
Name	The name of the email audit rule.
Status	The status of the email audit rule, including: Enable: enables the rule. Disable: The rule is disabled.
Rule Scope	The account or department that is subject to this email audit rule. You can choose: All members: Review emails sent by all accounts in the domain. Designated Department and Account: You can review emails sent by certain departments or accounts. If you select Add Department and check Include Subdepartments, the members of sub-departments under the selected department are also subject to this rule. Set Exceptions: Specify the applicable scope to some departments or all employees. You can add exceptions to some accounts or sub-departments of the department that do not require rules.
Email Direction	The direction and scope of the audited emails. To Local Domain: If an email sent by a specified account or department member meets the requirements, the auditor must review the email before sending the email. To External Domain: If an email sent by a specified account or department member meets the requirements, the auditor must review the email before sending the email.
Conditions	The content of the audit rule. Emails that meet this audit rule need to be reviewed by the auditor before then can be sent. 1. Applicable to all emails: All emails will be reviewed. 2. Send to Internal: If an email sent by a specified account or department member meets the requirements, the recipient must be reviewed by the auditor before the email can be sent. Send to External: If an email sent by a specified account or department member meets the requirements, an auditor must review the email before sending the email. 3. Include Specified Email Address as Recipient: The email sent to the specified email address must be approved by the auditor before the email is sent. 4. Recipient Quantity Threshold: If the recipient domain name of the same email is in the specified range, the email can be sent only after being approved by the auditor. 5. Email Size Threshold: If the size of an email is within the specified range, the email cannot be sent until it is approved by the auditor. 6. Match Keywords. Fill the keyword. Multiple keywords can be used for word segmentation by the Enter key. Match Subject: The email with the keyword in the subject must be reviewed by the auditor before it can be sent. Match Body: The email with the keyword in the email body must be reviewed by the auditor before it can be sent. Match Attachment Name: The email with the keyword in the attachment name must be approved by the auditor before it can be sent. 7. All Emails with Attachments: All emails that contain attachments must be approved by the auditor before they can be sent.
Email Auditor	Fill the email address of the auditor to set up an auditor for the audit rule. The email that meets the audit rules will be sent to the auditor's mailbox at the same time, and can only be sent after the auditor reviews it.
Approval Duration	Specifies the maximum audit time. Set the timeout action for emails that have not been approved due to timeout -Automatically Send: If an email is not approved after a timeout, it will be sent directly. -Automatic Reject: If an email fails to be approved during the timeout period is rejected, a bounce notification will be sent to the sender.