Currently, attachment blocking rules and notifications are configured so that internal recipients are notified when an attachment blocking rule is triggered. However, you may encounter the following scenarios:
- Security Risk Scan is configured to send notifications to internal recipients only. Unfortunately, the message gets quarantined but the recipient doesn't receive any notification.
- External recipients are set to Do not notify external recipients(s) as shown below, but the notifications are still being sent out to external recipients.
These scenarios happen because the Internal Email Definition setting is set to use Custom internal mail definition. This means that aside from setting the People to Notify section, you also have to configure the domain list specified under Custom internal mail definition.
Scenario A. Internal recipients do not get notifications
Although the domain is already listed as an internal domain, it must also be listed under Custom internal mail definition section.
- Access the ScanMail for Exchange management console.
- Navigate to Administration > Notification Settings > Internal Email Definition.
- Under Custom internal mail definition, type the email address or domain name and click Add.
- Click Save.
Scenario B. Notifications are still being sent to external recipients
The email addresses or domain names that will be considered as internal domains are those that have an asterisk (*). This is why even if the Do not notify external recipients option is enabled, it still sends notifications to external domains.
To resolve the issue:
- Open the ScanMail for Exchange management console.
- Go to Administration > Notification Settings > Internal Email Definition.
- From the list under Custom internal mail definition, highlight the asterisk (*) and click the Remove button.
- Click Save.