Content Examination - ZorgMail

This article contains information on creating and configuring ZorgMail Content Examination definitions and policies in Mimecast to check email headers and subjects, ensuring secure delivery and proper routing for ZorgMail communications.

Content Definition will be created to ensure that the emails are checked for syntax in the header of the email. In the case of ZorgMail, this syntax is "X-MS-Transport-Connect-To: ZorgMail". This syntax will be set by all ZorgMail transport rules in the Exchange On-Premises environment.  For Microsoft 365, there is specific guidance on how to adjust the transport rules so that they will create the header.

More information about Content Examination definitions and policies can be found on the Mimecast Customer Portal.

ZorgMail rules in Mimecast

In this section, you will create all the necessary rules for ZorgMail in Mimecast. Microsoft 365 or Exchange On-Premises will not perform any check for ZorgMail, and the transport rules in Microsoft 365 or Exchange should be disabled or removed.

Send Email Based on the Green Button

In this chapter, we will create a Content Examination definition and policy that will trigger information in the email header.

1. Navigate to Policies | Gateway Policies | Content Examination | Definition.
2. Select the Zorgmail – Content Definitions folder.
3. Click New Content Definition.
4. Give the Content Definition the name – “ZorgMail – X-Header Controle”.
5. Set an Activation Score of: 1.
6. Create line entries in the Word/Phrase Match List as below:

   [1 "company-confidential"].

   [1 "company confidential"].

7. Select Scan Message Headers.

8. Enable Inbound and Outbound Check.

9. Select “ZorgMail – Outbound” as Delivery Route option.
10. Select “ZorgMail – Secure Outbound” as Secure Delivery.

11. Click Save and Exit.

After creating the definition for the Content Examination, a policy must be created to execute the definition.
 

1. Navigate to Policies | Gateway Policies | Content Examination | Policy.
2. Click on New Policy.
3. Give the Policy the name – “ZorgMail – X-Header Controle”.
4. Select “ZorgMail – X-Header Controle“ on the Select Content Definition option.
5. Set Applies From to Internal Addresses.
6. Set Applies To to External Addresses.

7. Click Save and Exit.

Send Email Based on the Subject

In this section, we will create a Content Examination definition and policy that will be triggered by information in the email subject.

1. Navigate to Policies | Gateway Policies | Content Examination | Definition.
2. Click on ZorgMail – Content Definitions.
3. Click on New Content Definition.
4. Fill in the Policy Definition as in the image below:

5. In the Scanning options, create the 4 entries in the Word/Phrase Match List as below:

• • • 1 regex @SMS(\w*[0-9]\W*){8}.
    • 1 @SMS.
    • 1 "veilig mailen"
    • 1 veiligmailen

6. Select Scan Subject Line.

7. Enable Inbound and Outbound Check.   

8. Select “ZorgMail – Outbound” as Delivery Route option.

9. Click Save and Exit.

After creating the definition for the Content Examination, a Policy must be created to execute the definition.

1. Navigate to Policies | Gateway Policies | Content Examination |Policy.

2. Click New Policy.

3. Give the Policy a name.

4. Select “ZorgMail – Onderwerp Controle“ on the Select Content Definition option.

5. Set Applies From to Internal Addresses.

6. Set Applies To to External Addresses.

7. Click Save and Exit.

The configuration within Mimecast for ZorgMail is ready to be used.

Disable the inbound and outbound connectors in Microsoft 365 for ZorgMail!

ZorgMail rules in Mimecast

In this section, you will create all the necessary rules for ZorgMail in Mimecast. Microsoft 365 or Exchange On-Premises will not perform any check for ZorgMail, and the transport rules in Microsoft 365 or Exchange should be disabled or removed.

Send Email Based on Green Button

In this chapter, we will create a content examination definition and policy that will trigger on information in the email header.

1. Navigate to: Policies | Gateway Policies | Content Examination |Definition.
2. Select the Zorgmail – Content Definitions folder.
3. Click [New Content Definition].
4. Give the Content Definition a name – “ZorgMail – X-Header Controle”.
5. Create an Activation Score of 1.
6. Create a line in Word/Phrase Match List of:

• • • [1 "company-confidential"].
    • [1 "company confidential"].

7. Select Scan Message Headers.

8. Enable Inbound and Outbound Check.

9. Select “ZorgMail – Outbound” as the Delivery Route option.
10. Select “ZorgMail – Secure Outbound” as Secure Delivery.

11. Click Save and Exit.

After creating the definition for the Content Examination, a policy must be created to execute the definition.

1. Navigate to Policies | Gateway Policies | Content Examination | Policy.
2. Click New Policy.
3. Give the Policy a name – “ZorgMail – X-Header Controle”.
4. Select “ZorgMail – X-Header Controle“ on the Select Content Definition option.
5. Set Applies From to Internal Addresses.
6. Set Applies To to External Addresses.

7. Click Save and Exit.

Email Based on the Subject

In this section, we will create a Content Examination definition and policy that will trigger on information in the email subject

1. Navigate to Policies | Gateway Policies | Content Examination | Definition.
2. Click on [ZorgMail – Content Definitions].
3. Click on New Content Definition.
4. Fill in the Policy Definition as in the picture below:

5. In the Scanning options, create the 4 entries in the Word/Phrase Match List:

• • • 1 regex @SMS(\w*[0-9]\W*){8}.
    • 1 @SMS.
    • 1 "veilig mailen".
    • 1 veiligmailen

6. Select Scan Subject Line.
7. Enable Inbound and Outbound Check.

8. Select “ZorgMail – Outbound” as Delivery Route option.
9. Select “ZorgMail – Secure Outbound” as Secure Delivery.

10. Click Save and Exit.

After creating the definition for the Content Examination, a policy must be created to execute the definition.

1. Navigate to Policies | Gateway Policies | Content Examination | Policy.
2. Click New Policy.
3. Give the Policy a name.
4. Select “ZorgMail – Onderwerp Controle“ on the Select Content Definition option.
5. Set Applies From to Internal Addresses.
6. Set Applies To to External Addresses.

7. Click Save and Exit.

Email Based on Domain Integration

In this chapter, we will create a group for the ZorgMail Domainboek entries. When an email is sent to one of the domains, the ZorgMail-specific routing will be used to send the email.

Creating a Profile Group:

1. Navigate to the Mimecast Administration Console | Users & Groups | Profile Groups.
2. Click on [+] in front of Root to create a new subfolder.
3. Click on New Folder.
4. Change the name to ZorgMail Domains.
5. Press Enter on your keyboard.

6. Click on [ZorgMail Domain Intergratie].
7. Click on Build | Add Email domains.

8. Cut the domain entries from the file domainbook.txt that can be downloaded from https://relay.ZorgMail.nl/domainbook.txt
   

   Do not forget to remove the first line of the file.

   Do not forget to remove your own domains from this file.

9. Click on Save and Exit.

The domainbook.txt is a file that is updated on a regular basis. Partner Deltics has created a script to update the group on a regular basis. The script can be found on https://github.com/Deltics-GitHub/Zorgmail-Mimecast-Sync use is at your own risk, and Mimecast and Deltics cannot give any support on it.

Creating a Secure Delivery

1. Navigate to Policies | Gateway Policies | Secure Delivery.
2. Click on New Policy.
3. Give the Policy a name.
4. Select “ZorgMail – Secure Delivery“ on the Secure Delivery option.
5. On Email From : select “Internal Addresses” on Applies From option.
6. On Emails To : select Address Groups on Applies To option.
7. Select “ZorgMail“ on the Profile Group option.

8. Click on Save and Exit.

See Also...

• • • Setup ZorgMail Safe Relay

    • API & Integration - ZorgMail Safe Relay Setup - Exchange On-Premises

    • API & Integration - ZorgMail Safe Relay Setup - Office 365