Message Classification Key Features

Policy Verifier

---

Organizations can use classification labels to enforce policy before the email even leaves the desktop. This helps to prevent inadvertent disclosure of sensitive information, and gives the user instant policy feedback through pop-up warnings. These policy checks include:

• Trusted domains: Ensures that recipients are in approved email domains for the selected classification. This feature is typically used to prevent users from sending internal email to external recipients.
• Restricted domains: Prevents users from sending sensitive email to particular email domains, such as specific country domains. The policy can be applied to all email, or just email with a certain classification (e.g. Export Controlled).
• Safe recipients: Prevents email from being sent to unauthorized internal recipients. For example, an email that is labeled "HR only" can be restricted only to those employees who are in the HR group.
• Attachment checking: Checks the labels and filenames of attached documents to ensure that the email classification is at the same level or higher. This prevents confidential documents and embedded email from being accidentally sent out with lower email classifications, such as "Public".
• No downgrade/no change: Prevents users from changing or downgrading classifications when they reply to or forward an email. For example, a "Confidential" email cannot be changed to “Public” to bypass a trusted domains check.
• Maximum recipients: Warns users when they have selected a high number of recipients for the selected classification. This helps to prevent accidental disclosure of sensitive information to large distribution lists, including email sent with the Reply All option in Outlook.
• Warn on send: Forces the user to acknowledge the organization’s classification policy before they send the email, and records the user’s response for potential use in auditing.

The Policy Verifier feature is completely configurable by the administrator who can:

• Apply policies to specific classification labels.
• Customize the text on pop-up warnings.
• Configure user permissions to override the policy warnings.

Trusted Domains customizable warning message

Safe Recipients customizable warning message

Attachment Checking customizable warning message