09-30-2019 12:23 PM - edited 09-30-2019 12:25 PM
I recently created a content filter to add a header on all external e-mail. This was to prevent some people from replying to outside addresses that were clear phishing attempts. This has worked somewhat, however management would like to whitelist certain external addresses from receiving this header, even though they are external.
Right now I am keying off of inbound vs outbound connections. Inbound connections would go to the ESA Servers, then pass to Exchange. All internal e-mail from user to user shouldn't hit the ESA and would not get the header. The issue I am running into is how best to allow/whitelist these servers or addresses on this on the rule?
The majority of our filtering is handled via Sender Groups. We have one main group where we add most of our whitelists via server IP's or domains. However, I am wondering if these same groups can be used to whitelist a content filter, or if I need to add rules for "IP does not match" into the content filter?
Thanks for the help.
10-01-2019 02:31 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide