Enable BCC (ESA) to EX (FireEye)

John · ‎05-25-2017

Hi Team,

How to configure policy on Ironport to enable BCC to EX (FireEye)?

Libin Varghese · ‎05-25-2017

Hi John,

You can create incoming content filters on the ESA with condition as per your requirement and action set to bcc to a particular email address.

The bcc action sends an anonymous copy of the message to a specified recipient. This is sometimes referred to as message replication. Because no mention of the copy is made in the original message and the anonymous copy will never successfully bounce back to the recipient, the original sender and recipients of the message will not necessarily know that the copy was sent.

Make sure the filter is enabled on an incoming mail policy after being created.

Thank You!

Libin Varghese

ccg-security · ‎05-25-2017

Hi Libin,

Does ironport can scan BCC emails? Is there a way on the logs determine if a specific email has an BCC?

Thanks!

Libin Varghese · ‎05-26-2017

The ESA would treat an email address in bcc like any other recipient when scanning the email.

As bcc is primarily an email header, this information can only be viewed in the email client and not in the mail_logs.

- Libin V