The following section covers some common use cases for Netskope SMTP Proxy.
Scan Outbound Emails and Take Enforcement Action
- Configure the email server and the upstream MTA in the Netskope tenant.
- Configure Netskope SMTP Proxy in Microsoft’s Exchange admin center or Google Admin console.
- Create a Real-time Protection policy for Email Outbound, select Microsoft Office 365 Exchange or Google Gmail as the email outbound.
- Under Profile and Action, select the various DLP profiles based on the different types of sensitive content you want to identify in the emails.
- Set the action type to Add SMTP Header so that Netskope SMTP Proxy can add the custom header to the email when the email content matches the policy definition.
For detailed information on configuring the Microsoft O365 Exchange server in the Netskope tenant, see Configure Netskope SMTP Proxy with Microsoft O365 Exchange.
For detailed information on configuring the Gmail server in the Netskope tenant, see Configure Netskope SMTP Proxy with Gmail.
For detailed information on configuring a real-time protection policy, see Configure Real-time Protection Policies for Email Outbound.
Apply a Real-time Protection Policy for only a Certain Group of Email Users or to All Users
When creating a new real-time protection policy for outbound email, you can apply the policy to only a certain group of email users by selecting the user groups under source. If you don’t select any users, groups, or organizations under source, the policy is applied to all users by default.
View a Notification when DLP Rules are Triggered
Netskope sends email notifications and creates alerts in the UI under Skope IT > Alerts. For detailed information on viewing alerts, see View Netskope SMTP Proxy Alerts.