Verified Answers

If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it! Learn more

  • State Verified Answer
  • Replies replies
    6
  • Subscribers subscribers
    6
  • Views views
    454
  • Users 0 members are here
  • +1 person also asked this people also asked this
Related
Options

scan POA for non-virus content with SMG

AndrewFerris

We were just hit with a social engineering/ CEO fraud attack that our involved users did not bite on thankfully. But I have been directed to ask if twe could use something like an IMAP inteface policy to scan for emails that are not virus-ey but rather of the format [HighRankingPerson]@gmail.com. I don't think so but can SMG do something like that with the POA?

thanks,

Andrew

Parents

  • Verified Answer

    +1  

    Yes, SMG can do an IMAP scan of your GroupWise post office.

    You can create multiple Scan Policies and use one Policy Scan Configuration specifically created for your post office scan.

    That Policy Scan Configuration behaves the same as any other. For example, you can use filters to check for text strings and attach services to deal with them accordingly.

    __________
    Kevin Boyle, SuperUser
    Calgary, Alberta, Canada

  • 0 in reply to   

    Ok thanks Kevin. The challenge is that these attacks vary and in this particular case it was [HighRankingPerson} as the Display name and the sender/reply to address was completely different which on the plus side degraded the utility of the attack. So it would be inherently reactive... 

  • 0   in reply to 
    AndrewFerris said:
    Display name and the sender/reply to address was completely different

    This is not uncommon when dealing with mass mailings.

    • From: is the person who composed or owns the email.
    • Sender: can be an individual responsible for sending it or service responsible for mass mailings.
    • Reply to: can be another email address different from both the From and Sender address.

    All of which just makes life interesting for sysadmins. :-)

    __________
    Kevin Boyle, SuperUser
    Calgary, Alberta, Canada

Reply
  • 0   in reply to 
    AndrewFerris said:
    Display name and the sender/reply to address was completely different

    This is not uncommon when dealing with mass mailings.

    • From: is the person who composed or owns the email.
    • Sender: can be an individual responsible for sending it or service responsible for mass mailings.
    • Reply to: can be another email address different from both the From and Sender address.

    All of which just makes life interesting for sysadmins. :-)

    __________
    Kevin Boyle, SuperUser
    Calgary, Alberta, Canada

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.