Configuring Content Overseers Policies

Document created by user.oxriBaJeN4 Employee on Sep 11, 2015Last modified by user.oxriBaJeN4 Employee on Apr 2, 2019
Version 13Show Document
  • View in full screen mode

A Content Overseers policy assigns a group of users to act as overseers for messages in the on hold queue. Content overseers don't require access to the Administration Console. Instead they can review, release, or reject messages by logging on to Mimecast Personal Portal, Mimecast Mobile, or Mimecast for Outlook. Once configured, they can oversee all messages held due to spam scanning, content examination, or attachment management policies.


This is useful in the following circumstances:

  • A personal assistant requiring access to a manager's (or a group of manager's) hold queues, but who don't have access to their Mimecast accounts.
  • A Help Desk assisting in reviewing and releasing messages in the administration hold queue, but who don't have access to the Administration Console.
  • A Compliance Team reviewing messages triggering a content examination policy configured to hold outbound mail that contains company sensitive information.


Usage Considerations


Consider the following before creating a policy:

  • We recommend using the Moderator Group options in spam scanning, content examination, or attachment management definitions, as these offer the same functionality as a Content Overseers policy.
  • If multiple users are to be overseers, a group is required prior to configuring this policy. This group can be a local Mimecast group or a directory group.
  • A Content Overseer policy takes effect on the next messages that match the content examination, spam scanning, or attachment management policy.
  • If notifications are required for the overseers, these must be configured in the same policies mentioned above. If the policy is triggered, a content alert notification is sent to the members of the Content Overseers group. This notification can be amended using a notification set. See the Configuring a Notification Sets Policy page for full details.


Configuring a Content Overseers Policy


To configure a Content Overseers policy:

  1. Log on to the Administration Console.
  2. Click on the Administration menu item. A menu drop down is displayed.
  3. Click on the Gateway | Policies menu item. The Gateway Policy Editor is displayed.
  4. Click on Content Overseers. A list of policies is displayed.
  5. Either select the:
    • Policy to be changed.
    • New Policy button to create a policy.
  6. Complete the Options section as required:
    Policy NarrativeProvide a description for the Policy to allow you to easily identify it in the future.
    Select Oversight GroupUse the Lookup button to select the group of users to act as overseers.
  7. Complete the Emails From and Emails To sections as required:
    Field / OptionDescription
    Addresses Based OnSpecify the email address characteristics the policy is based on. This option is only available in the "Emails From" section. The options are:
    The Return Address (Mail Envelope From)This default setting applies the policy to the SMTP address match, based on the message's envelope or true address (i.e. the address used during SMTP transmission).
    The Message From Address (Message Header From)Applies the policy based on the masked address used in the message's header.
    BothApplies the policy based on either the Mail Envelope From or the Message Header From whichever matches. If both match the specified value the Message Header From is used.
    Applies From / ToSpecify the Sender characteristics the policy is based on. For multiple policies, you should apply them from the most to least specific. The options are:
    EveryoneIncludes all email users (i.e. internal and external). This option is only available in the "Emails From" section.
    Internal AddressIncludes only internal organization addresses.
    External AddressIncludes only external organization addresses. This option is only available in the "Emails From" section.
    Email DomainEnables you to specify a domain name to which this policy is applied. The domain name is entered in the Specifically field.
    Address GroupsEnables you to specify a directory or local group. If this option is selected, click on the Lookup button to select a group from the Profile Group field. Once a group has been selected, you can click on the Show Location field to display the group's path.
    Address AttributesEnables you to specify a predefined Attribute. The attribute is selected from the Where Attribute drop down list. Once the Attribute is specified, an attribute value must be entered in the Is Equal To field. This can only be used if attributes have been configured for user accounts.
    Individual Email AddressEnables you to specify an SMTP address. The email address is entered in the Specifically field.
  8. Complete the Validity section as required:
    Field / OptionDescription
    Enable / DisableUse this to enable (default) or disable a policy. If a date range has been specified, the policy will automatically be disabled when the end of the configured date range is reached.
    Set Policy as PerpetualIf the policy's date range has no end date, this field displays "Always On" meaning that the policy never expires.
    Date RangeUse this field to specify a start and / or end date for the policy. If the Eternal option are selected, no date is required.
    Policy OverrideThis overrides the default order that policies are applied. If there are multiple applicable policies, this policy is applied first unless more specific policies of the same type are configured with an override.
    Bi-DirectionalIf selected the policy is applied when the policy's recipient is the sender, and the sender is the recipient.
    Source IP Ranges (n.n.n.n/x)Enter any required Source IP Ranges for the policy. These only apply if the source IP address used to transmit the message data, falls inside or matches the range(s) configured. IP ranges should be entered in CIDR notation.
  9. Click on the Save and Exit button.


See Also...