You want to setup IMSVA to send BCC copies to DDEI for analysis.
DDEI can operate in a BCC mode where DDEI receives copies of all emails passing through your email gateway without directly interfering with the actual emails. This is similar to an archiving solution because DDEI only reports the scanning results without forwarding the messages. The email copies DDEI receives will be deleted/quarantined after processing.
To configure IMSVA inbound scanning policy to send BCC copies to DDEI:
In the IMSVA Admin console, go to Policy > Policy List.
- On the Policy page, click Add and then click Other.
The Select Recipients and Senders window appears.
- On the This rule will apply to drop-down menu, select incoming messages then click Next.
Note: At the bare minimum, you will have to define the addresses or domains of the recipients. DDEI will scan the BCC copies from these recipients. You may also narrow down your selection by defining senders or exceptions.
- Select other conditions if you do not want all emails scanned. To scan all emails, leave all options at their default settings then click Next.
- Under the Monitor section, tick the BCC box and enter a recipient address that will be routed to DDEI. Then click Next.
Note: If you want IMSVA to directly deliver BCC copies to DDEI, choose a BCC address with a dedicated (preferably nonpublic) email address/domain.
For example: email@example.com
- Configure a new domain-based delivery setting for DDEI.
- Go to Administration > IMSVA Configuration > SMTP Routing.
- On the SMTP Routing page, go to the Message Delivery tab then click Add.
Specify the Domain Name, Server address (IP Address of DDEI) and Port number.
For example:Domain name: ddeibccscanning.mydomain.com
Server address and Port number: ddei.mydomain.com:25
In the above example, this tells the local Postfix daemon to deliver the emails to the BCC domain of “ddeibccscanning.mydomain.com” to the IP of DDEI.Only BCCs of emails that are not blocked or quarantined by IMSVA will be forwarded to DDEI.