RE: Monitoring emails.

["Bahrs, Art" <Arthur.Bahrs () providence org>]

Hi Peter,
   Ok, You don't mention budget or other constraints... so "anything is possible" :)

   Couple ideas come to mind... Proxy based solutions... a proxy could monitor the content of the email ... Span Port 
on a network device with the 'span' sent to something like Snort or other DLP solution. (What to do with the 'Span' is 
an exercise left to the student <eg> as it will be very dependent on the "firm" and it's intentions)

Thanks
Art

Art Bahrs, CISSP
Security Engineer (Oregon Region)
(503) 216-2722


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of peterodigie () gmail com
Sent: Sunday, June 12, 2011 8:27 AM
To: security-basics () securityfocus com
Subject: Monitoring emails.

Hi all!

I am seeking for ideas. A firm will want to monitor the emails of its staff,
knowing all the mails that pass through its domain. They have a domain with
email accounts registered and hosted by an independent body. Staff access
their email account within and outside the internal network (using their
Blackberry and other networks). Part of the issue at hand is how can you
affirm that a particular mail got to another staff. Some staff affirm that
they have sent a mail to another staff and while that other staff denies it.


One option is for them to speak with the domain registrar and set up a
monitoring account but they want something in house - within their internal
network. A system that collects all the mails that pass through their
domain; the system does not has to be always on.

F1!!!!!

Thanks.

Peter


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



This message is intended for the sole use of the addressee, and may contain information that is privileged, 
confidential and exempt from disclosure under applicable law. If you are not the addressee you are hereby notified that 
you may not use, copy, disclose, or distribute to anyone the message or any information contained in the message. If 
you have received this message in error, please immediately advise the sender by reply email and delete this message.


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------