RE: Internet E-mail monitoring/approval

[Bruce Fowler <bfowler () hvp com au>]

Ted,

The legal issues associated with any covert monitoring of communications is
a dark area which tends to grey depending on the political and risk climate
of the region you are i) operating in; and ii) operating from, at the time.
You should establish unequivocally your own rights, responsibilities and
liabilities as the professional offering the advice *as well as* those of
your client *before* making any recommendations in this regard before
finding yourselves at the pointy end of a legal action.

Regards
 
Bruce Fowler


-----Original Message-----
From: Ted Frederick [mailto:tfrederick () ascentek com] 
Sent: Friday, 11 April 2003 2:38 AM
To: security-basics () securityfocus com
Cc: fcorker () ridgeviewinstitute com; bhavin () securematics com
Subject: RE: Internet E-mail monitoring/approval


Hello all.

Thank you for the responses thus far, they are much appreciated.

In reading the responses however, I realize that I may have been less than
clear.

The scenario I have described is a request from a client so posting to this
list should not have compromised any secrecy. Also, it is my understanding
that e-mail sent using a company's e-mail system is considered the property
of that organization and therefore the organization can do with it what they
want.  If I am mistaken in this then please let me know.

What this client wants to do is approve e-mail before it is sent to verify
that there are not trade secrets and the like being leaked form this
particular user.

Thank you Frank and Bhaven for your responses to date.  

Ted



-----Original Message-----
From: Ted Frederick [mailto:tfrederick () ascentek com] 
Sent: Wednesday, April 09, 2003 1:59 PM
To: security-basics () securityfocus com
Subject: Internet E-mail monitoring/approval


Greetings list:

I am looking for a way to monitor a particular user's e-mail for legal
purposes.

What they want to do is have all outgoing mail from this user to be routed
to a manager for approval before being sent.

Of course, they want to do this without that particular user knowing it is
happening, and without buying anything new.

They currently are using Exchange 2000 and Outlook 2002 for their e-mail
system.

Any suggestions?  I thought that I had read something in this list some time
ago.

Ted


-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection. http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support. Stop SPAM before it stops you.
-------------------------------------------------------------------



-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection. http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free
technical support. Stop SPAM before it stops you.
-------------------------------------------------------------------

-------------------------------------------------------------------
Is SPAM over-loading your e-mail server, disk space or bandwidth?
SurfControl E-Mail Filter is flexible, intelligent and policy-driven
protection.
http://www.securityfocus.com/SurfControl-security-basics2
Download your free fully functional trial, complete with 30-days of free technical support.
Stop SPAM before it stops you.
-------------------------------------------------------------------