Monitoring - Mail

On this page it is possible to set up capturing incoming and outcoming emails in the mail clients and web.
It is necessary to enable the Network driver

Supported clients and protocols:
Outlook - all mails (Exchange/SMTP/POP3/IMAP);
Lotus Notes - only outgoing;
Thunderbird, TheBat, Mail - all mails (SMTP/POP3);
Web clients: the list of supported websites may vary from version to version, and you will also need to configure the proxy if it is used on client machines to access the Internet.

Do not monitor correspondence with these e-mails
You can specify a list of e-mail addresses, mails with the presence of which in the "To", "Copy", "CC", "From" fields will not be monitored.

List of masks for internal (corporate) e-mails
You can specify a comma-separated list of masks for corporate e-mails.
Example:
*@company.org, *@int.company.org
This list will be used to generate the corresponding event with additional notification in the system tray.

Outlook: monitor only default storage
Turn on the option if Outlook performance problems are observed on client machines - it will monitor not all storages, but only the main one (default).

Outlook: do not intercept mails
Select only appointments from the Outlook calendar (if the corresponding option allows it) and do not intercept mails. Typically this option is for debugging purposes.

Outlook: do not intercept appointments
Select only mails from the Outlook (if the corresponding option allows it) and do not intercept appointments from calendar. Typically this option is for debugging purposes.

Outlook: monitor folders for DLP-attachments
This option is an extension of file analysis for occurrences of confidential data (see the settings on the "DLP" tab)
Acc. with the monitoring interval setting Outlook folders ("Appointments", "Tasks" and "Drafts") are scanned and, if detected an attachment file that meets the criteria set on the "DLP: Rules" tab, an event "DLP: file found" is generated (should be enabled at the "Events" tab). If the deletion option is enabled, the attachment file will be deleted and a notification about the deletion will be sent to the user in the system tray.

Attention! It is necessary to enable "Shadow copy" in the clients and server settings for capturing emails!

v11.1.3476 (build: Jan 12 2026)
Introduction +Software suite structure +Software suite installation +Software suite uninstall +Software suite update -Global settings Database users -Software suite settings General settings description +Server settings +Client settings (computer) -Client settings (user) Common settings Monitoring - Face recognition Monitoring - User time Monitoring - Applications-sites Monitoring - Keylogger Monitoring - Clipboard Monitoring - Screenshots Monitoring - Screenshots (extra) Monitoring - Printing Monitoring - File operations Monitoring - Sending files Monitoring - Mail Monitoring - Chats-calls Monitoring - Shadow copy Monitoring - Black box Monitoring - Geolocation Monitoring - Autorecording Restrictions Threats DLP - Common settings DLP - Quarantine DLP - Rules DLP - By file formats DLP - OCR Critical apps-sites Atypical behavior Events Events (video) Events (extra) Outsourcing 2FA (employee) Quarantine-files Groups Company structure Work schedules Dossier of employees Sync with AD Risk analyzer Report templates File hashes Tariffs List of users Work with DB SQL-console Journal +Other +FAQ +Technical support	Monitoring - Mail On this page it is possible to set up capturing incoming and outcoming emails in the mail clients and web. It is necessary to enable the Network driver Supported clients and protocols: Outlook - all mails (Exchange/SMTP/POP3/IMAP); Lotus Notes - only outgoing; Thunderbird, TheBat, Mail - all mails (SMTP/POP3); Web clients: the list of supported websites may vary from version to version, and you will also need to configure the proxy if it is used on client machines to access the Internet. Do not monitor correspondence with these e-mails You can specify a list of e-mail addresses, mails with the presence of which in the "To", "Copy", "CC", "From" fields will not be monitored. List of masks for internal (corporate) e-mails You can specify a comma-separated list of masks for corporate e-mails. Example: @company.org, @int.company.org This list will be used to generate the corresponding event with additional notification in the system tray. Outlook: monitor only default storage Turn on the option if Outlook performance problems are observed on client machines - it will monitor not all storages, but only the main one (default). Outlook: do not intercept mails Select only appointments from the Outlook calendar (if the corresponding option allows it) and do not intercept mails. Typically this option is for debugging purposes. Outlook: do not intercept appointments Select only mails from the Outlook (if the corresponding option allows it) and do not intercept appointments from calendar. Typically this option is for debugging purposes. Outlook: monitor folders for DLP-attachments This option is an extension of file analysis for occurrences of confidential data (see the settings on the "DLP" tab) Acc. with the monitoring interval setting Outlook folders ("Appointments", "Tasks" and "Drafts") are scanned and, if detected an attachment file that meets the criteria set on the "DLP: Rules" tab, an event "DLP: file found" is generated (should be enabled at the "Events" tab). If the deletion option is enabled, the attachment file will be deleted and a notification about the deletion will be sent to the user in the system tray. Attention! It is necessary to enable "Shadow copy" in the clients and server settings for capturing emails!
© KICKIDLER DLP