forum.wfiltericf.com

I have a question. I am able to log outgoing emails and read them. Is

there a way to log incoming and read them as well?



I have a Firewall with a Linksys switch port mirroring. Everything works

great, but one of our end users needs to be able to monitor the incoming

emails too.

WFilter supports recording of POP3, IMAP4, SMTP emails. If your email server uses these protocols, it should be recorded.



Can you tell me your network topology? email server version?

And which email client they are using?

The server is Windows Small Business Server 2003/Exchange. The clients are all XP running Outlook 2003. The outgoing emails are all recorded just fine. I can check the logs and open the Outgoing emails through WFilter. I cannot see any incoming emails.



WFilter records all of the Outgoing off the server itself. No emails are recorded from the client machines. I assume because this is an Exchange server that is why it records on the server only. I want to record incoming on the server as well.



Firewall - Cisco RV082

Mirror switch - Cisco SRW2008

Firewall to port #1 on switch

Port #2 uplinks to LAN switch



Monitoring computer:

NIC#1 - into LAN Switch

NIC#2 - into port #8 of monitoring switch



Port #8 mirrors Port #1



All connections (server/firewall/NIC#1/NIC#2) have static IPs.

For email protocols, WFilter supports SMTP, POP3, IMAP4, Lotus Notes and web-based emails.

However, the default exchange server protocol using outlook is not supported because it's traffic is encrypted.



If you are using outlook with the default exchange server protocol, you may have two solutions to monitor exchange server emails:



1. Force the clients to use pop3 or IMAP4 to receive emails, which can be monitored by WFilter.



2. Use exchange server's admin account to receive a copy for all emails. Exchange server itself provides such a feature to monitor all incoming/outgoing emails.