Block outgoing email by content?

[gimecoffee]

SonicWall has a feature that will block outgoing email based on content. At least that's how I'm reading this page ( ] dot sonicwall knowledge-base:170503423633215 . I'm wondering if Untangled has a way to do the same thing. I'm thinking specifically about U.S. Social Security Numbers, bank account and/or credit card info. Mainly hoping to stop accidental emailing of sensitive information.

Any thoughts or WIKI pages where I could read about how to make that work would be greatly appreciated.

Rois

[jcoffin]

It's not possible to inspect word content of emails with Untangle.

[sky-knight]

It should be noted, the mentioned feature from Sonicwall can only work on SMTP, not TLS or SSL protected SMTP.

If you have workstations that are transmitting mail to an external mail server via unencrypted SMTP, you have problems, and you need to fix them.

If you have an internal mail server, that's transmitting this information, you need to configure it to not do so. There are rules in Exchange for this sort of thing. If you aren't using a mail server that has the ability to manage its own content, you need a new mail server.

So, no you cannot fix this with Untangle, and no you cannot fix this with Sonicwall. Not really, anyway.

[gimecoffee]

Sounds like I need to research "Data Loss Prevention (DLP)" systems.

Thank you for your replies.

[dmorris]

Probably. Most DLP is not going to be network based (anymore) as everything uses encryption.
(If you are sending information in the clear still, I would fix that first!)

In some cases, and in some specific scenarios you may be able to use SSL inspection, but this is rare in the real world given the requirements and headaches of SSL inspection.

FWIW, I'd checkout proofpoint for email DLP and go from there.