Policies - Group Carbon Copy Policy

This article contains information on configuring a Group Carbon Copy policy in Mimecast to blind copy users or groups on emails, including setup steps, usage considerations, and policy customization options.

A Group Carbon Copy policy allows you to blind copy individuals or groups on messages based on the email flow. The message's sender and recipient are unaware that it has been blind copied to any other email addresses. In certain situations, Administrators may require others to be copied in on emails. For example:

• A temporary requirement while an end user is away.
• A Compliance Officer needs access to all messages sent from a certain individual to an external recipient or company.

Usage Considerations

Consider the following before creating a policy:

• The additional email addresses are added to a message's BCC field during transmission. If a BCC'd user replies to all, the original sender will be aware that their message was carbon copied.
• A group must be created that contains the addresses of the users who will receive the carbon copy. This group can be a local Mimecast Group or a Directory Group.
• When an external email address/domain is added to the associated Profile Group, this creates a new Audit Log entry. The only way to create a new audit entry will be to add an external email address/domain to the Profile Group through the Administration Console.

Configuring a Group Carbon Copy Policy

To configure a Group Carbon Copy policy:

1. Log in to the Mimecast Administration Console.
2. Navigate to Policies | Gateway Policies.
3. Click on Group Carbon Copy.
4. Either select the:

• • Policy to be changed.
  • New Policy button to create a policy.

5. Complete the Options section as required:

Field / Option	Description
Policy Narrative	Provide a description of the policy to allow you to easily identify it in the future.
Select Carbon Copy Group	Click on the Lookup button to select a Carbon Copy Group.

6. Complete the Emails From and Emails To sections as required:

Field / Option	Description
Addresses Based On	Specify the email address characteristics that the policy is based on. This option is only available in the "Emails From" section: The Return Address: This default setting applies the policy to the SMTP address match, based on the message's envelope or true address (i.e., the address used during SMTP transmission).
Applies From / To	Specify the Sender characteristics on which the policy is based. For multiple policies, you should apply them from the most specific to the least specific. The options are: Everyone: Includes all email users (i.e., internal and external). This option is only available in the "Emails From" section. Internal Address: Includes only internal organization addresses. External Address: Includes only external organization addresses. This option is only available in the "Emails From" section. Email Domain: Enables you to specify a domain name to which this policy is applied. The domain name is entered in the Specifically field. Address Groups: Enables you to specify a directory or local group. If this option is selected, click on the Lookup button to select a group from the Profile Group field. Once a group has been selected, you can click on the Show Location field to display the group's path. Address Attributes: Enables you to specify a predefined Attribute. The attribute is selected from the Where Attribute drop-down list. Once the Attribute is specified, an attribute value must be entered in the Is Equal To field. This can only be used if attributes have been configured for user accounts. Individual Email Address: Enables you to specify an SMTP address. The email address is entered in the Specifically field.

7. Complete the Validity section as required:

Field / Option	Description
Enable / Disable	Use this to enable (default) or disable a policy. If a date range has been specified, the policy will automatically be disabled when the end of the configured date range is reached.
Set Policy as Perpetual	If the policy's date range has no end date, this field displays "Always On" meaning that the policy never expires.
Date Range	Use this field to specify a start and/or end date for the policy. If the Eternal option is selected, no date is required.
Policy Override	This overrides the default order in which policies are applied. If there are multiple applicable policies, this policy is applied first unless more specific policies of the same type are configured with an override.
Bi-Directional	If selected, the policy is applied when the policy's recipient is the sender, and the sender is the recipient.
Source IP Ranges (n.n.n.n/x)	Enter any required Source IP Ranges for the policy. These only apply if the source IP address used to transmit the message data falls inside or matches the range(s) configured. IP ranges should be entered in CIDR notation.

8. Click on the Save and Exit button.

See Also...

• Configuring Forwarding Address Definitions and Policies