cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1374
Views
5
Helpful
3
Replies

Replace specific recipient on inbound emails

skibum0191
Level 1
Level 1

We've been attempting to use an Incoming Content Filter to handle a unique situation. We have an employee who left and in his departure, his e-mail now needs to be variably redirected between two people. Emails from a specific domain to the ex employee should have the ex-employee's email address replaced with a current e-mail employee. Emails from all other domains should pass through as normal, our Exchange server is setup with an alias on the other current employee's e-mail address for the ex-employee's address.

What we have seen is that with a content filter where the action is "Change Recipient to", the correct employee is getting the e-mails, BUT, anyone else that was on the to distribution line is not getting them. In addition, in the current employee's outlook, to him it looks like the email is still addressed to everyone that would have originally received it.

To demonstrate:

Ex@domain.com = ex-employee

C1@domain.com = current employee who should receive all e-mails from @domain.net where Ex@domain.com is on the To or CC list

C2@domain.com = current employee who should receive all other emails that were addressed to Ex@domain.com

Email from User@domain.net to Ex@domain.com comes in and is correctly reassigned to C1@domain.com although they see that the To address shows as C2@domain.com

Email from User@domain.net to Ex@domain.com;C3@domain.com;C4@domain.com; this e-mail comes in and instead of going to C1,C3, and C4, only gets delivered to C1@domain.com although they see it as being to C2, C3, and C4.

Any ideas on how we can simply replace any instances of Ex@domain.com with C1@domain.com regardless of the To/CC/BCC list and maintain all the other recipients still?

3 Replies 3

marc.luescherFRE
Spotlight
Spotlight
I have an idea, let me try in our testlab.

Edit the headers you need changed using a replace regex in a content filter.



svgeorgi
Cisco Employee
Cisco Employee

You need to isolate the ex-employee in a separate incoming mail policy in which only his/her email address will be listed as a recipient - this way you'll be able to use the so called mail splintering:

https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5-1/user_guide/b_ESA_Admin_Guide_13-5-1.pdf#unique_173

This way you will be able to set a content filter only for this new policy and change only its recipient. The email will get split and rest of the recipients will match the usual incoming mail policy. Separate MIDs will be created for the ex-employee and for the rest of the recipients, and this gives you the opportunity to treat them differently.