Monitoring Email Content!

The policy that is in place needs to state that e-mail may be monitored... or you need to update your policy.

http://www.redearthsoftware.com/email-monitoring-article.htm

Software:
http://www.ssimail.com/Sesemail.htm
http://www.redearthsoftware.com/PolicyPatrolEnterprise.htm
http://www.isaserver.org/software/W2K/Email_Content_Security/
http://www.monitoring-software.net/email-monitoring-software.htm

Exchange 5.5 SP2 introduced a new function JOURNALING (its also included with SP3 & 4). With Journaling you can specify that all messages passiing the MTA be copied and that copy sent to a special account. You will then need to review the contents of the account manually to determine what is being sent. Ok that was the free way.

There are several 3rd party vendors available that have tools that will do this for you. What you want to do is research for tools that allow for Policy Filtering, Retention Filtering, Archiving, Content Filtering, etc. Some tools such as Baltimore Technologies, Nemx, TFS, Legato, Omniva, MailMarshall, etc. exist.

Sites with more information on the various vendors are:

http://www.msd2d.com/

http://www.slipstick.com/

http://www.msexchange.org/

Good luck

Rick

I guess you could also just sniff the SMTP packets as they pass to/from the Exchange server, if you could set up a sniffer on a span port. Sure, it would be ugly as hell trying to read it, but possible, since SMTP is not encrypted.
Anyway, just anoption.

To monitor the content from Exchange you would right click on the desktop Outlook icon and select >properties and select> setup email accounts and directories. Then you would select > view or change existing email accounts and click next. from there make sure the exchange server is highlighted and select > Change

In the Exchange Server settings box click > more settings. then from the microsoft exchange server box select the >advanced tab. there you will be givin the option to add aditionals mailboxes. you simply type in the username and you can set the password authentication to none and you are off!

Be sure to mark opened emails as unread or users will then become suspicious of email monitoring!