How can I see WHY a message was encrypted?

On our Postx box, I used to be able to see specifically what caused a message to become encrypted (for example a social security number). It would report what keyword(s) triggered the encryption.
We just replaced the Postx with an IronPort C150 (love it!) and I would like to be able to get the same info. I see that I can go to Monitor -> Content Filters to see which users had encrypted mail, then I can use Message tracking to see details including that the message WAS encrypted, however I would like to see the details of WHAT triggered the content filter.
Thank you.

I have no experience with the Ironport encryption solutions at all but a possible solution might be to add a second action to your policy that writes the required info into an X- header.
if you enable logging for this header you will see the results in your log files.
I can imagine you do not want the information in the X-header to be public (which is the nature of X- headers).
There are two possible solutions for that.
1) Use numeric codes for the data in the X-header. Only you have the matching table to see what code points to what message filter or filer action.
2) Play around with policies and message filters. They are always executed in the same order (which I do not recall at the moment) if you make sure the first of the two does the detection and adds the header, you can use the second to strip the header out of the message.
Quite complex but possible for sure!
Good luck
Steven

Similar Messages

  • HT4528 How can I see if a picture was sent from my phone? I am not sure the number it was sent to, it may have been an i-phone. I just want to know if someone sent themselves a pic from my phone....

    How can I see if a picture was sent from my iPhone? I am not sure the number the picture(s) was sent to..and whether or not it was an iPhone...I just want to know if someone sent themselves pics from my phone. Aside from a court order to obtain data message info, any ideas? Any info is greatly appreciated.

    by email?
    by mms?

  • How can I see my deleted messages on my icloud

    How can I see my deleted message and message from my icloud

    Huh? You can't. Once you delete something, well it's deleted.
    If you have a backup, that contains these deleted messages, you can restore from that backup, to restore them to your phone. If no backup, or your backup has been overwritten, then they are gone.

  • How can i see which Apple ID was used to download an app?

    how can i see which Apple ID was used to download an app, cause i cant remember, thanx

    Hi maikeru1,
    If you have your apps synced to iTunes, you can use a similar process to that outlined in the following article (the Get Info command) to show what Apple ID it was purchased under:
    Apple Support: Recovering a forgotten iTunes Store account name
    http://support.apple.com/kb/ht1920
    Regards,
    - Brenden

  • How can i see iPhone sms message in my iPad

    how can i see my iPhone ams messages in my iPad?

    All iPad 4s have the A6X chip in it - if you type in the iPad's serial number (Settings > General > About > Serial Number) in on this page then that will confirm whether it's an iPad 4

  • How can i see the error message?

    hi, i have written a procedure in the database 10g, with my own error, and it works. but, when my exception occurs, i want to see my ora-20000-message in the footer of the isql-screen in the same way like normal ora-errors do it. because, now the code handles the exeption, but i can not se any message.
    thx.
    (zahl1 in number, zahl2 in number)
    as
    maxvertrag number;
    ergebnis number;
    myerror exception;
    pragma exception_init(myerror, -20000);
    begin
    select max(vertragsnr) into maxvertrag from robertl.tblugovor;
    ergebnis := zahl1+zahl2+maxvertrag;
    if ergebnis>104
    then
    RAISE_APPLICATION_ERROR (-20000, 'Result is > 104!');
    end if;
    exception when myerror then
    ergebnis:=0;
    end;

    This is answered in how can i se the error message?.
    As a side note, you generally don't need to cross-post in these two fora, as many of us frequent both.
    Cheers, APC

  • Stoopid question: how can I see all the messages in a thread?

    I know most lists have a "show all messages in thread" option, but I can't seem to find one here. One of the topics I waned to read about has a hundred or so messages in the thread, but I can only see about 6.

    Hi Paul!
    If there are additional pages of messages in one topic, at the bottom of the thread page, you will see Pages: X# and the numbered pages.
    You can click on Next, to advance to the following page, or choose a specific page.
    You can't view all posts on one page.
    EDIT: Thanks Jody! I forgot about that!
    ali b

  • How can you see when an event was created?

    Is there a way to see when an event was created in a calendar?

    However, this will have no legal standing - it is not a proof and it trivial to fake. Only carefully set up digital signatures (set up in particular ways) have legal standing (varies by country).

  • How can I see which 'Additional Content' was installed?

    Once in a while, Lpx says it needs to download Adittional Content. I allow to do so, and then it does.
    After a while it's done. And now? I would love to see what's new! Does anyone know how?
    Thanks,
    Jay

    Hi maikeru1,
    If you have your apps synced to iTunes, you can use a similar process to that outlined in the following article (the Get Info command) to show what Apple ID it was purchased under:
    Apple Support: Recovering a forgotten iTunes Store account name
    http://support.apple.com/kb/ht1920
    Regards,
    - Brenden

  • How can I see my iPhone messages on my Macbook Pro?

    Hi, and thanks for any and all responses.
    I just upgraded to ML 10.8.1.
    One of the features I was anticipating was a sync between Messages on my iPhone (4S, 5.1.1), and MacbookPro (MBP.)
    Right now, and messages coming into my iPhone are not visible in Messages on the MBP.
    I have read elsewhere this is a feature of IOS 6, due in the fall.
    I have read similiarly that I need to change my Messages Settings on the iPhone to Receive At, my email address. (Unacceptable.)
    Checking settings I noticed something interesting.
    As I first obtained an AppleID many years ago, before MobileMe, my AppleID on my MBP, (and in Messages), is [email protected], whereas my AppleID on my iPhone is [email protected]
    Should this make any difference? Should I someohow change my AppleID on my MBP to .me?
    Any and all help is appreciated.

    Thanks for the replies!
    Ok, I want to be clear, so here is the first page in Messages Settings on the iPhone.
    So I Click on "Caller ID. And the phone number is checked...
    Are you saying to change the check mark to the email address?
    And if so, how will that affect receiving Messages on my iPhone?
    Will I still receive messages to the Phone Number?
    Will I lose all the previous message threads?

  • IPad stolen. Can I see what app data was backed up in iCloud?

    Hello,
    My ipad was stolen.
    How can I see what app data was backed up on icloud?
    Thank you
    - Jim

    Unfortuantely, you can see what's in a backup without restoring it to your device.  You also can't selectively restore just certain apps.  Also, your apps aren't really stored in your backup, only your app data is.  When you restore the backup, the app data is restored, then the apps are redownloaded from the App store, along with your other purchased media, assuming they are still available.
    What you could do is back up your iPad to your computer (connect it to your computer, open iTunes, then go to File>Devices>Back Up and File>Devices>Transfer Purchases), then erase it (Settings>General>Reset>Erase All Content and Settings), restore the old backup (go through the setup screens and when given the option, choose Restore from iCloud Backup).  Then you could either live with the restored backup and all it contains, or erase it again and restore the iTunes backup you made earlier (connect it, open iTunes, go to File>Devices>Restore from Backup).

  • Despite numerous reboots Firefox would not open for 3 days because apparently it was occupied, how can I see what it is occupied with and how to close it ?

    I opened my online banking site but could not sign in or sign out hence I closed the website and closed Firefox. For 3 days I could not open Firefox nor Explorer. During the 3 days I rebooted several times. On the forth day when I opened Firefox a screen opened saying Firefox was embarrassed etc. etc.. and that I could restore my online banking site which I did. I was able to sign in and sign out of the account and close the website. My question is when Firefox locks up like this, how can I see if a site is open in Firefox if I can't open Firefox?
    I am using Windows 7

    The 'Embarrassed' screen comes up when Firefox has not closed down correctly and is trying to restore the situation. This will not always succeed, and you may have to do a normal restart.
    * [[Firefox hangs or is not responding - How to fix]]
    * [[Restore previous session - Configure when Firefox shows your most recent tabs and windows]] (This has info on the embarrassing screen)
    You should always try to close Firefox by using
    * '''Firefox Button -> Exit''' (Windows 7)
    * File -> Quit (on XP and other systems)
    Where possible try to avoid closing by: killing the process, closing the window, or turning off the computer whilst Firefox is running.
    If you are unable to sign in to a website sometimes it may be a Firefox problem, other times it may be an internet problem, or the site itself.
    * see also [[Websites don't load - troubleshoot and fix error messages]]
    * and [[Fix problems connecting to websites after updating Firefox]]
    I do not know why you could not open firefox for 3 days, presumably a problem with your computer. Note even if there is no internet Firefox itself should still open when required.
    If Windows Explorer is not running/working there was probably not much you could easily do with the computer. Or was your problem with Internet Explorer (The default Windows Browser) again possibly a symptom of a bigger problem.

  • When I turn on messages, I can't see my messages.  All I can see is a screen with horizontal lines and a text list of addresses.  How can I get the regular message screen back?

    When I turn on Messages, I can't see my messages.  All I can see is a screen with horizontal lines.  How can I get the regular Messages screen back?

    The same is happening for me. Today I decided to reboot my PC because it was acting up a bit, go figure, and then for some reason at the same time the PC was restarting my macbook froze. I had to do a reboot with the restart button but then all that came up was a gray background and in the middle of the screen was a darker gray folder with a white question mark in the middle of it, blinking. I can't imagine why the restart would've affected my macbook. After finding information on how to fix this, I tried all of the steps that were given about using the mac OS X disk to use the first aid utility to fix it. When using the Disk Utility option whenever I select my hardrive and am in the First Aid tab, the only button I can use is the Verify Disk Permissions. The other three buttons, and namely the most important Repair Disk button, is/are not selectable (grayed out). I then tried resetting the PRAM the way they also said with the command + option + P + R and waited for the second startup sound. After that I gave the Disk Utility a second try, but still nothing. And now if I try to just reinstall the OS completely I can't even select a destination volume on the third step (Select Destination). Apparently this means i'm SOL.

  • How can I include a success message in a drag and drop interaction - I don't see this option in the Actions on success options, and cannot figure it out?

    How can I include a success message in a drag and drop interaction - I don't see this option in the Actions on success options, and cannot figure it out?

    I suspected you used the eye icon on the timeline to hide the message, but that one has no impact whatsoever on the published version. It is only meant to be used for editing reasons on the stage, to hide objects temporarily on a crowded stage. It is confusing, certainly in CP8 where for both instances the same eye icon is used. In previous versions the Properties panel had a checkbox for 'Show in Output', which was IMO much clearer than this eye icon. But of course, that is only my personal opinion.

  • I am running Windows 7 64Bit system and everything was working normal.  However, I am now getting an error message stating objc.dll is missing.  I've re-installed Itunes but to no avail.  How can I get this error message corrected?

    I am running Windows 7 64Bit system and everything was working normal.  However, I am now getting an error message stating objc.dll is missing.  I've re-installed Itunes but to no avail.  How can I get this error message corrected?

    See this User Tip by turingtest2
      https://discussions.apple.com/docs/DOC-6562

Maybe you are looking for

  • Spry Photo Gallery Navigation

    Hi, I'm building a simple photo gallery and I'm having issues trying to navigate image to image while using Paged View. My first attempt without paged view I could navigate image to image and once you reached the first or last image on a page, the ne

  • Optical out to Onkyo A/V Recei

    I would like to output audio from my pc to my A/V home theater system. My card is Audigy 2 ZS Platinum. Recei'ver Onkyo NR80. The Toslink cable is from the Audigy front panel optical out to the Onkyo Optical in. The cable is acti've as I see the glow

  • Using EL in navigation model

    Hi All, I am using webcenter portal application. I want to check a condition and based on that condition i want to navigate to the specific page, which i think can be done with a bean call from a commandlink on action attribute. May i know how to imp

  • Multiple cursors for one plot

    Hi everybody, I'm trying to put multiple plots on my XYGraph. I need then that for instance cursor1=f(cursor0). Is it possible ? If it's not what are the alternatives ? Best regards. MartinO. Solved! Go to Solution.

  • I would like to cancel my annual plan

    I just subscribe 20 days ago to a annual plan. I would like to cancel it this day 18.10.2014. Thanks to help me.