Jump to:navigation, search
Wiki

Email management

From Securepoint Wiki
















































































De.png
En.png
Fr.png









Manage emails in the UTM user interface

Last adaptation to the version: 12.6.0

New:
  • New section: Tags
  • Screenshots updated
  • Updated to Redesign of the webinterface
Last updated: 
    02.2024
notempty
This article refers to a Resellerpreview
Access: https://url.firewall.individuell  Email management  Email statistics

Introduction

The UTM's email section stores emails that

  • are in quarantine due to a mailfilter rule
    or
  • whose content has been captured by the URL filter.

Features:

  • Listing of which emails are in quarantine
  • If applicable: list of which emails were delivered
  • View quarantined emails
  • Download attachments
  • Redeliver emails
  • Statistics
notempty
In particular, the possibility to resend emails requires a very conscientious check if these emails are free of unwanted malicious code!
 notempty
Regular users are shown only emails from their own mailbox.
Mailfilter administrators have access to all mailboxes here.


The configuration for this must be done in the admin interface under the Applications Mailfilter menu.
There, in the
Settings
 tab, you can configure whether unobjected emails
with meta information only
are also listed here(Save all email transactions), how long emails are kept here, with what replacement text criticized content, URL and viruses are replaced and when a spam report is sent.














































     | }}-->

Login to the user interface

  • The user login to the user interface is called up via the IP address or URL of the UTM, possibly followed by a port specification
  • Depending on the assigned permissions, various functions are made available
  • Click on the corresponding tile to access the desired function

Configured Port Example call with IP Example call with URL
Default 443 i.e. https://192.168.175.1 i.e. https://utm.ttt-point.de
Port changed bei administrator
Menu: Network / Appliance Settings / Appliance Settings / Webserver / User Webinterface Port
4443 i.e. https://192.168.175.1:4443 i.e. https://utm.ttt-point.de:4443


The responsible admin must provide the IP address or domain name and, if necessary, the port for the user web interface

After entering the IP address, the user login page of he Securepoint UTM is loaded. The login credentials are entered there.

Value Description UTM-v12.2.3-Benutzer-Login-OTP-en.png
The login window User Login with the two and the optional third input box.
User Username
Password The associated password
OTP Code
Optional		 If this input box is displayed, a one-time password (OTP) must be entered
The one-time password (OTP) is an authentication mechanism that provides additional security when a user logs in.
  • The code to create OTPs must be supplied by the administrator
    •  Login You can log in to the user interface by clicking on this button after entering all login data correctly.


    Email management

    Filter options

    [–] Filter options

    This area displays an overview of all quarantined emails. The emails can be filtered or sorted by their user, sender, recipient, date of receipt, subject and labeling (click on the respective column header).

    Caption Value Description Email management UTMuser@firewall.name.fqdn UTM v12.6.1 UI E-Mails Mailbox-en.pngOverview of filter options in e-mail management with default settings
    User: All No restriction
    User missing Shows only emails without user
    ann Only shows emails to the selected sender.
    In this case all emails from ann@anyideas.de.
    Sender: All No restriction
    Sender missing Shows only emails without sender
    root@cybermail.local Only shows emails to the selected sender.
    In this case all emails from root@cybermail.local.
    Recipient: All This filter is used to filter the mails according to the selected recipient.
    Recipient missing Shows only emails without recipient
    ann@fnub81.de Only shows emails to the selected recipient.
    From:     The display can be limited to a date or a time frame.
    A click into the respective field opens a calendar with selection dialog.
    Until:     The display can be limited to a date or a time frame.
    A click into the respective field opens a calendar with selection dialog.
    Subject:     The emails are filtered according to the entered subject
    Labeling:     Displays emails with the selected tag. Multiple tags can also be selected.
    »Action:Rejected »Action:Not rejected »Action:Accepted »Action:Not accepted »Action:Downloaded attachment »Action:No attachment downloaded »Action:Send again »Action:Not resent »Action:Filtered »Action:Not filtered »Action:Tagged »Action:Not tagged »Action:Quarantine »Action:Not quarantined »Action:Temp quarantine »Action:Not in temp quarantine »Action:Discarded »Action:Not discarded »Reason: Spam »Reason: Not Spam »Reason:Virus »Reason: Not a Virus »Protocol:Mail-Connector »Protocol:Not a Mail-Connector »Protocol:POP3 »Protocol:Not POP3 »Protocol:SMTP »Protocol:Not SMTP

    Email overview

    Example of a filtered mail in the email management.

    In the user management, the administrator can configure under Authentication User  Area Mailfilter whether or not the downloading or forwarding (resending) of attachments or emails is permitted for the user.

    In the table header and on the far left of each mail is a checkbox .
    If the checkbox in the table header is clicked  , all emails in the table that can be redelivered (emails that have not been discarded, rejected or already accepted) are selected.
    Alternatively, the respective emails can also be selected differently using the checkbox to the left of each email.

    Afterwards, the emails highlighted in this way can be sent using the button on the left under the table Send again.




    Email details

    Email details UTMuser@firewall.name.fqdn Send again UTM v12.6.1 UI Mailquarantäne E-Mail Details-en.png The screenshot shows an email with two attachments, one of which contains a (test) virus.
    In the user administration the following permissions have been configured by the administrator under Authentication User  Area Mailfilter:
    Allow download of the following attachments: Quarantined but not filtered
    Allow forwarding of the following emails: Quarantined and/or filtered     If you wish to read a filtered out mail in the quarantine box, click on the 'Open email' button. A new window will open with the content of the opened email. Refer to the figure.

    notempty
    If the mouse is hovered over the attachment, a text box appears with further information about this attachment. Besides the name and the MIME type of the attachment, a short info about the attachment is also displayed. Additionally, it informs whether the user is authorized to open this attachment.
    		 UTM-v12.2.3-Anhänge-Hover-en.png
    The displayed hover text box at the attachment of the sample email No Viral infection 2! from viral@anyideas.de. The left attachment is downloadable for the user, but the faded right attachment is not.



    Tags

    notempty
    New as of: v.12.6.0
    notempty
    To be able to use tags, the user requires Group authorization On Administrator mail tag. This must be configured by the administrator.

    Emails can be marked with self-created tags. This Wiki article describes how tags are created.
    Each new email is then checked to see whether it has similarities with the email with the assigned tag. The new email is then assigned this tag accordingly.
    The button opens a dialog in which an email can be assigned a tag.

    Caption Value Description Tag UTMuser@firewall.name.fqdnEmail management UTM v12.6.1 UI E-Mail-Verwaltung Tag-en.png
    Tag:     A list of the tags created. Only one tag can be selected.
    Description:     The description of the created tag selected above is inserted.
    The selected tag is applied with the
    button.

    Resend email/s

    notempty
    To be able to resend emails, the user needs to be a member of a Group that allows the forwarding of emails. This must be configured by the administrator.

    Send again UTMuser@firewall.name.fqdnEmail management Send again UTM-v12.6.1-Mail-Erneut-zusenden-Auswahl-en.pngBesides the default setting Original recipients, the possible other recipients are also displayed Resend is available for emails with the tag:

    • Filtered
    • Quarantine

    Emails that have been discarded, rejected or already successfully delivered cannot be redelivered.
    An opened email can be resend individually or several highlighted emails can be resend at the same time. After clicking the Send again button, the following dialog appears: Under Recipients:, Original recipients is selected by default. Then all selected emails or the opened email will be send to their original recipients.
    Alternatively, a specific arbitrary e-mail address is selected. Then a delivery is made to this selected recipient.


    After selecting the recipient, click
    Send again
    Send again
    to confirm the operation. notempty
    It must be ensured that resend emails are free of unwanted malicious code.
    These emails do not pass through the mailfilter again.


    Statistics

    Statistics UTMuser@firewall.name.fqdn UTM v12.6.1 UI E-Mails Statistiken-en.pngExample statistics The statistic shows a temporal overview of all emails for 30 days. These mails are categorized according to their tags.

    Mailfilter administrators can select here whether they want to display statistics about all users or only for a specific mailbox.

    Retrieved from "https://wiki.securepoint.de/index.php?title=UTM/UI/E-Mail_Verwaltung&oldid=94595"