Mailboxes with external redirect rules
AI summary
Identify mailboxes with automatic forwarding rules to external addresses, which send company email outside your organization without anyone noticing and are sometimes created by attackers or users forwarding to personal email accounts. Check each rule with the mailbox owner, remove unapproved ones, and block automatic external forwarding in your outbound spam policy.
What it detects
Shows mailboxes which have redirect rulesRedirect ruleA redirect rule forwards or redirects the incoming email of a mailbox to another recipient.Read more that redirect to external domains.
Why it matters
An inbox rule that redirects mail to an outside address sends company email out of the organization without anyone noticing. Attackers who take over a mailbox often add such a rule, and users sometimes set one up to read work mail in a personal account. Check each rule with the mailbox owner, remove those that are not approved, and block automatic external forwarding in the outbound spam policy.
The rule
Every Mailbox that has any Redirect Rules where Contains external email is true
In Rencore Governance
Details
Frequently asked questions
What does the mailboxes with external redirect rules policy detect?
The Mailboxes with external redirect rules policy shows mailboxes which have redirect rules that redirect to external domains.
Which objects does the mailboxes with external redirect rules policy check?
The Mailboxes with external redirect rules policy checks Mailbox objects from the Exchange inventory and reports each one that matches its rule as a violation.
How severe is a violation of the mailboxes with external redirect rules policy?
Violations of the Mailboxes with external redirect rules policy have High severity. The policy is in the Security category.
Which module includes the mailboxes with external redirect rules policy?
The Mailboxes with external redirect rules policy comes with the Exchange connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?