Email Management: Configure IMAP
To access this page, navigate to Configure > Threat Prevention > Sky ATP Email Management.
Use the Sky ATP Email Management page to configure email management for IMAP. With email management for IMAP, enrolled SRX Series devices transparently submit suspicious emails to Sky ATP for inspection and blocking.
Before You Begin
Read the Sky ATP Email Management Overview topic.
Decide how malicious emails are handled. For IMAP, the available options are to block or permit email. Unlike SMTP, there is no quarantine option for IMAP and no method for previewing a blocked email.
To configure IMAP:
- Select Configure > Threat Prevention > Sky ATP Email Management and choose the IMAP Settings tab.
- Select a Sky ATP Realm and click the pencil icon to configure email management settings for that realm.
- Complete the configuration as per the guidelines given
in Table 1.
Based on your selections, configuration options will vary.
Table 1: Configure Block Malicious Messages
Action to take
When you select to block email attachments, in place of the original email, intended recipients receive a custom email you configure with information on the block action. Both the original email and the attachment are stored in the cloud in an encrypted format.
When you add IMAP servers to the list, it is sent to the SRX Series device to filter emails sent to Sky ATP for scanning. For emails that are sent for scanning, if the returned score is above the set policy threshold on the SRX, then the email is blocked.
Select the Specific IMAP Server option above and click the + sign to add IMAP server hostnames to the list.
Note: You must use the IMAP server hostname and not the IP address.
Email Notifications for End Users
Learn More Link URL
If you have a corporate web site with further information for users, enter that URL here. If you leave this field blank, this option will not appear to the end user.
When an email is blocked, the recipient receives a custom message informing them of their blocked email. For this custom message, enter a subject indicating a suspicious email sent to them has been blocked, such as "Malware Detected."
Enter information to help email recipients understand what they should do next.
Custom Link Text
Enter custom text for the Sky ATP quarantine portal link where recipients can preview blocked emails and take action on them.
Administrators Who Receive Notifications
To send notifications to administrators when emails are blocked or released from quarantine:
- Click the + sign to add an administrator.
- Enter the email address of the administrator and click OK.
- Once the administrator is created, you can uncheck or
check which notification types the administrator will receive.
Block Notifications—If you enable this option, a notification is sent when an email is blocked.
Unblock Notifications—If you enable this option, a notification is sent when a user releases a blocked email.