New in Email Security Gateway v7.8.3

Topic 70080 | Release Notes | Email Security Gateway | Version 7.8.3 | Updated: 26-May-2014


Applies To:	Websense Email Security Gateway v7.8.3 Websense Email Security Gateway Anywhere v7.8.3

Enhancements added to version 7.8.2 focus on tighter integration with Data Security DLP policies, enhanced spam detection, and increased system health awareness. The following new Email Security Gateway features are available in version 7.8.3:

Email Security Gateway filter action in DLP policy

Spamhaus service integration

Inbound undelivered email alert

Other enhancements are also included in this release.

Email Security Gateway filter action in DLP policy

Currently, an email DLP policy for Email Security Gateway is configured in Data Security, where the policy's action plan is also specified. This release provides tighter integration between Email Security Gateway and Data Security by allowing a DLP policy action plan to include a filter action configured in Email Security Gateway (Main > Policy Management > Actions). DLP policy action plans can now receive the benefit of the following Email Security Gateway filter action capabilities:

Email header modification

Notification message delivery

Personal Email Manager end-user portal options

Delivery to a specified message queue

Scheduled message delivery

Virtual IP address use for large-volume message delivery

Domain-based routing message delivery

Blind copy delivery

Message forwarding

For most network configurations (i.e., single standalone appliance or single appliance cluster), the property settings available for creating an action for an email DLP policy are the same as those for an Email Security Gateway policy action. However, if your network includes multiple standalone appliances or multiple clusters, the DLP policy action settings available when an action is first created are limited.

The following Email Security Gateway message action options are available for use in a filter action created for a Data Security action plan:

Resume processing. Message action options for the resume processing option are the same as those described for the deliver message option, as long as you are creating an Email Security action or you are creating a Data Security action and your network is configured in a single appliance/appliance cluster. (See Email Security Manager Help for information.)

However, if you are creating an action for use in Data Security, and your network consists of multiple standalone appliances or appliance clusters, the following action property settings are limited:

Use IP address. Only the IP address of the appliance E1 interface is supported.

Deliver email messages based on domain-based route. Only the default domain-based route is supported (Settings > Inbound/Outbound > Mail Routing).

Save the original message to a queue. Only Email Security Gateway default queues are supported. You may not specify a user-configured queue.

Drop message. For a Data Security action created in a multiple appliance/multiple cluster environment, only Email Security Gateway default queues are available.

Strip attachment option. Select this option if you want Email Security Gateway to remove an attachment from an email message as part of the policy action. This option is available only for Data Security policy actions.

Spamhaus service integration

A Real-Time Blacklist (RBL) is a third-party published list of IP addresses that are known sources of spam. When RBL checking is enabled, messages from a sender listed on an RBL are prevented from entering your system.

Email Security Gateway now supports the use of the Spamhaus Datafeed server for RBL lookups (Settings > Inbound/Outbound > Connection Control). With the Spamhaus service enabled, a connection IP address is sent to the Spamhaus Datafeed server for analysis. If a connection IP address is on the Spamhaus blacklist, the connection is dropped.

Inbound undelivered email alert

This version of Email Security Gateway includes a new system health alert, inbound undelivered email notifications, which are sent when messages are not being delivered because your mail server is down. Undelivered messages are stored in a delayed inbound queue, where they can use an increasingly large amount of disk space.

After you enable this alert type, you can also specify a frequency threshold at which the alert should be sent. Click Configure alert thresholds to open the Undelivered Inbound Email Alert Configuration dialog box. Enter a value for the number of connection errors per minute that you want to trigger an alert (default is 1).

Use the Settings > Alerts > Alert Events page to configure this alert type.

Other enhancements

This release of Email Security Gateway also includes the following enhancements:

Improved Personal Email Manager end-user Quarantined Messages List performance

A new user validation/authentication method called Distribution List, in which individual members of an email distribution list are validated (Settings > Users > User Authentication). Ensure that you include group email addresses in your user directories if you want to use this option.

The Connection Log now displays a connection status of Accepted, along with the reason for an accepted connection.

A new Check Status button on the Settings > General > Backup/Restore page which, when clicked, ensures that the specified remote log database server is accessible

A new Check Status button on the Settings > Alerts > Enable Alerts page which, when clicked, sends a test message to your SNMP server and verifies that the specified SNMP port is open