Google Message Security for Google Apps Administration Gu User Manual

Message Securityfor Google AppsAdministration Guide• Google Apps for Business

10 Message Security for Google Apps Administration Guide X-pstn-disposition Header Field 409X-pstn-nxpr and X-pstn-nxp Header Fields 410Attachment Ma

100 Message Security for Google Apps Administration Guide Delete UsersApplication ManagementJunk Email SettingsSender ListsSpam FiltersSexually Expli

Administrators 101Monitor AdministratorsA monitor administrator views the overall status and activity of an account or a sub-organization. This admi

102 Message Security for Google Apps Administration Guide Positioning Monitor Authorization RecordsIn large accounts, an authorization record for mon

Administrators 103User SettingsTraffic LimitsChange AddressAdd UsersDelete UsersApplication ManagementJunk Email SettingsSender ListsSpam FiltersSex

104 Message Security for Google Apps Administration Guide Outbound Applications ManagementEdit OrganizationsNotification MessagesManage DomainsMessag

Administrators 105Compliance Officers and Security AdministratorsA compliance officer manages the operations and procedures of a company’s complianc

106 Message Security for Google Apps Administration Guide Recommended Compliance Officer and Security Administrator Privilege SettingsFor detailed in

Administrators 107View Images, Attachments, and LinksOrganization ManagementAssign AuthorityAssign Peer AuthorityChange Admin PasswordsCreate Organi

108 Message Security for Google Apps Administration Guide Archive AdministratorsAn archive security administrator manages the important but very focu

Administrators 109Archive Security AdministratorArchive Security Administrators have full access to the corporate archive and full access to Message

11About This GuideWelcome to the Administration GuideThis guide contains detailed information for setting up and administering your email security ser

110 Message Security for Google Apps Administration Guide Archive Audit AdministratorAn archive audit administrator manages the account-level audit r

Administrators 111Archive Investigator AdministratorAn archive investigator administrator manages which investigators can search which users’ messag

112 Message Security for Google Apps Administration Guide Recommended Archive Administrator Privilege SettingsFor detailed information for each privi

Administrators 113View Images, Attachments, and LinksOrganization ManagementAssign AuthorityOptionalAssign Peer AuthorityChange Admin PasswordsCreat

114 Message Security for Google Apps Administration Guide Archive Security AdministratorAlone: Message Archiving login and, with archive settings, o

Administrators 115Organization Policy AdministratorsAn organization policy administrator manages the common settings, services, and administrative c

116 Message Security for Google Apps Administration Guide In an additional example of large, complex hierarchies, an organization policy administrato

Administrators 117Delete UsersApplication ManagementJunk Email SettingsSender ListsSpam FiltersSexually ExplicitVirus SettingsShow Delivered-As-IsPe

118 Message Security for Google Apps Administration Guide Manage DomainsMessage Center BrandingApplication ManagementTraffic LimitsJunk EmailVirusWir

Administrators 119User AdministratorsA user administrator manages the general user administration tasks such as moving and suspending users.Note: T

12 Message Security for Google Apps Administration GuideOnline HelpThe complete content of this guide is available in online Help format, a browser-ba

120 Message Security for Google Apps Administration Guide In large, complex hierarchies, a user administrator can also be assigned at a strategic man

Administrators 121Application ManagementJunk Email SettingsSender ListsSpam FiltersSexually ExplicitVirus SettingsShow Delivered-As-IsPending Quaran

122 Message Security for Google Apps Administration Guide Descriptions of PrivilegesYou have the option of assigning a category of privileges (such a

Administrators 123You may also be able to choose between “Read” and “Modify” since you might want to provide visibility into an organization (“User

124 Message Security for Google Apps Administration Guide Delete Users If your product has this configuration, you can delete users from an organizat

Administrators 125Organization ManagementAll privileges related to the organization hierarchy. For detailed information for each Organization Manage

126 Message Security for Google Apps Administration Guide View Reports Enables the viewing of inbound reports.Outbound Mail ProcessingConfigure and m

Administrators 127Inbound Mail ProcessingFor detailed information for each Inbound Mail Processing privilege, see ,“Inbound Mail Processing” chapte

128 Message Security for Google Apps Administration Guide Archive Investigator Security Restricts an archive search investigation to the messages for

Chapter 6 Domains 129DomainsChapter 6About DomainsEvery Internet email address includes a domain, which specifies where mail should be sent. For inst

Chapter 1 The Administration Console 13The Administration ConsoleChapter 1About the Administration ConsoleThe Administration Console is a secure web-

130 Message Security for Google Apps Administration Guide Searching for DomainsIf you manage a large number of domains, you can find domains using th

Domains 131Click Move Domain link next to move a domain from one organization to another.Add a Domain AliasDuring activation, your service is initia

132 Message Security for Google Apps Administration Guide Delete a Domain AliasYou can delete a domain alias by logging in to your Google Apps for Bu

Chapter 7 The Message Center 133The Message CenterChapter 7About the Message CenterYou can allow users to manage their own spam, viruses, and other q

134 Message Security for Google Apps Administration Guide Message Center: Features OverviewWhen their Message Center is enabled, users can log in usi

The Message Center 135By default, your service automatically deletes virus-infected messages, so users won't see any messages in the Virus quar

136 Message Security for Google Apps Administration Guide Most User Access changes should be made for organizations. It is possible to configure User

The Message Center 137Enable Access for an OrgTo enable Message Center access for an org, you make sure access is enabled at the user level. Then tu

138 Message Security for Google Apps Administration Guide For existing users, you must disable access for each account. You can use a Batch command t

The Message Center 139Set Permissions for an OrganizationUser Access permissions should almost always be controlled from the org-level, and rarely c

14 Message Security for Google Apps Administration Guide Logging in to the Administration Console1. Log in to the Google Apps control panel. Open a w

140 Message Security for Google Apps Administration Guide Setting User Access permissions for an org2. On the org’s User Access page, click check box

The Message Center 141Sender ListsRead only Users can see any Approved and Blocked Senders, and Approved Mailing Lists, defined for them via their u

142 Message Security for Google Apps Administration Guide Override Permissions for a Single UserYou can override User Access for an individual user,

The Message Center 143If your company follows SEC requirements to archive all messages viewed by employees, however, allowing users to open messages

144 Message Security for Google Apps Administration Guide For information on configuring notifications, see “About Notifications” on page 149. See be

The Message Center 145Welcome notification Enable this notification for an org if the Message Center is also enabled for the org, as it provides eac

146 Message Security for Google Apps Administration Guide Message Center Color PaletteUse the Message Center Color Palette to set Message Center colo

The Message Center 1473. Choose from the following options:• Blue• Red• Green• Gray• Orange4. Click Save to make your change.These colors affect the

148 Message Security for Google Apps Administration Guide 6. Click Save to upload the logo and add your file. You will be redirected to the Organizat

Chapter 8 Quarantine Summary & Notifications 149Quarantine Summary & NotificationsChapter 8About NotificationsUser notifications are messages

The Administration Console 15This page includes several useful links:• You can find a link to the Message Center in the upper-right corner of the pa

150 Message Security for Google Apps Administration Guide To set up notifications for an organization:1. Go to Orgs and Users > Orgs.2. Choose the

Quarantine Summary & Notifications 1515. Click the Edit link in the gray menu bar of the User Notifications page.6. Following are descriptions o

152 Message Security for Google Apps Administration Guide Welcome New UserDetermines whether new activated users receive the New Service Welcome emai

Quarantine Summary & Notifications 153The default setting is Immediately.Early DetectionDetermines whether a user receives a notification when a

154 Message Security for Google Apps Administration Guide Quarantine SummaryThe Quarantine Summary is an HTML-formatted email that lists the messages

Quarantine Summary & Notifications 155The default setting is Off for both Inbound and Outbound.Note: The timestamps for Attachment Manager notif

156 Message Security for Google Apps Administration Guide Notification AddressYou can specify the address where the user’s notifications are sent. No

Quarantine Summary & Notifications 157Turning off NotificationsUse the instructions in the section “Configuring Notifications for an Organizatio

158 Message Security for Google Apps Administration Guide 2. Enter the user address in the Find User field, then click Search.3. On the User Overview

Quarantine Summary & Notifications 159The Quarantine Summary is sent to the user’s primary email address, or notice address. If there are no spa

16 Message Security for Google Apps Administration Guide To quickly access a user’s quarantine or view settings, enter their email address in the Use

160 Message Security for Google Apps Administration Guide Configuring the Quarantine Summary You must configure these options for the Quarantine Summ

Quarantine Summary & Notifications 1614. Turn on or off the quarantine summary, set the frequency and time of delivery, and turn on or off the m

162 Message Security for Google Apps Administration Guide FrequencyThe default is every seven days. The frequency range is one to ten days.Subject Li

Quarantine Summary & Notifications 163We recommend that you set notifications for user organizations (though they can be set at the account and

164 Message Security for Google Apps Administration Guide Quarantine Summary & Message Center LocalizationWhen you enable language localization,

Quarantine Summary & Notifications 165Setting Languages Using Batch commandsYou can change the language of the Quarantine Summary with the follo

166 Message Security for Google Apps Administration Guide Troubleshooting: User NotificationsHow can I change the name of the company that appears in

Quarantine Summary & Notifications 167See “Default Notifications with Tokens” on page 388 for information on customizing notifications and a lis

168 Message Security for Google Apps Administration Guide

Chapter 9 Spam Filters 169Spam FiltersChapter 9About Spam FiltersYour message security service detects spam by applying hundreds of rules to each mes

The Administration Console 17Email ActivityThe Email Activity graph shows an at-a-glance summary of important email statistics from the last 60 minu

170 Message Security for Google Apps Administration Guide Where Spam Filtering Is ManagedYou manage spam filtering at the following locations:• Organ

Spam Filters 171Types of Spam FiltersWhen spam filtering is enabled for a user, the user’s messages are processed through the following filters:• If

172 Message Security for Google Apps Administration Guide This means:• If the message security service detects spam, the message goes to the Message

Spam Filters 173You can see a message’s spam score, whether or not it’s tagged as spam, by looking at the message header. For details, see “ Interpr

174 Message Security for Google Apps Administration Guide Configure Blatant Spam BlockingBlatant Spam Blocking (BSB) is an org-level setting on the S

Spam Filters 1753. For the org’s Default User (and any existing users), make sure the Filter Status is On (go to Spam Filters on the user’s Overview

176 Message Security for Google Apps Administration Guide Whether or not you have configured Outbound Services for you mail server, we recommend that

Spam Filters 177If Quarantine Summary is also enabled for the org (under Notifications), each user receives a periodic summary of recently quarantin

178 Message Security for Google Apps Administration Guide You enable spam filtering and adjust how aggressively you want to filter under Spam Filteri

Spam Filters 179How spam is handled when it is identified by these filters depends on the spam disposition defined for the user’s organization. For

18 Message Security for Google Apps Administration Guide Activity Information MeaningValid messages Total count of valid messages that were passed on

180 Message Security for Google Apps Administration Guide Phishing AttacksSpam Filtering also provides protection against phishing attacks.A phishing

Spam Filters 181Messages are held in the Early-Detection Quarantine for 8 hours to allow time for virus-definition files to be updated, and then tho

182 Message Security for Google Apps Administration Guide Troubleshoot False PositivesOn rare occasions, legitimate messages can be falsely filtered

Spam Filters 183Go to Spam Filtering on the user’s Overview page and verify that the Bulk Email and other category filters are set high enough (see

184 Message Security for Google Apps Administration Guide If so, all spam addressed to the user, regardless of any spam settings, is delivered to tha

Chapter 10 Virus Blocking 185Virus BlockingChapter 10Levels of ProtectionYour message security service offers multiple levels of protection against v

186 Message Security for Google Apps Administration Guide Messages are held in the Early-Detection Quarantine for 8 hours to allow time for virus-def

Virus Blocking 187Additional Zero-Hour Threat ProtectionThe following additional zero-hour threat protection is available to you:Advanced Antivirus

188 Message Security for Google Apps Administration Guide Attachment ScanningVirus Blocking scans messages for both complete and incomplete MIME head

Virus Blocking 189The Virus Blocking disposition has precedence over other filter dispositions. When Virus Blocking is enabled:• All messages that a

The Administration Console 19Message CompositionThe Message Composition box displays a pie chart summary of the number of delivered messages, virus

190 Message Security for Google Apps Administration Guide McAfee Virus Definition FilesVirus Blocking uses DAT files provided by McAfee that contain

Virus Blocking 191Configure Virus Settings for UsersYou turn virus blocking on/off and set the notification interval for users by editing the defaul

192 Message Security for Google Apps Administration Guide 4. Click Save.Configure Virus Settings for an OrganizationThe virus settings for a user org

Virus Blocking 193Early Detection FilteringQuarantines messages that may contain viruses.You need to configure Spam Filtering in order to implement

194 Message Security for Google Apps Administration Guide 3. Click Save.Message Fragment BouncingBounces fragmented messages.Values: On or Off. The d

Virus Blocking 195Configuring User Access to Virus SettingsIf you allow user access to the Message Center, we highly recommend turning off permissio

196 Message Security for Google Apps Administration Guide Troubleshooting Virus BlockingWhy was this virus delivered despite virus blocking?In most c

Virus Blocking 197Resolution: As necessary, configure a different disposition, or configure your mail server to dispose of all messages that contain

198 Message Security for Google Apps Administration Guide If the virus was delivered after the protection date and time determined above, then compar

Chapter 11 Content Manager 199Content ManagerChapter 11About Content ManagerContent Manager scans email messages for specific content—words, phrases,

2 Message Security for Google Apps Administration Guide Google, Inc.1600 Amphitheatre ParkwayMountain View, CA 94043www.google.comPart number: ADG_MS

20 Message Security for Google Apps Administration Guide Other versions of the message security service use this tab to manage mail server informatio

200 Message Security for Google Apps Administration Guide Content Manager FeaturesYou can use Content Manager to filter both inbound and outbound ema

Content Manager 201File Attachment ScanningYou can create content filters that scan all parts of an email message, including any text-based file att

202 Message Security for Google Apps Administration Guide Protect proprietary informationYou can use Content Manager to help prevent recipients outsi

Content Manager 203When Content Filters ApplyThe message security service applies Inbound Content Manager filters after Connection Manager (attack b

204 Message Security for Google Apps Administration Guide Types of Content ScannedIn any part of an email message, Content Manager scans the text-bas

Content Manager 205Content Manager does not scan attachments that are:• ZIP or other types of compressed files• Microsoft 2007 Office documents• Ove

206 Message Security for Google Apps Administration Guide Order of Precedence of Filters and PoliciesThe least severe disposition takes precedence ov

Content Manager 2072. Under Inbound Services or Outbound Services, click the Content Manager icon. The Content Manager filter list appears, showing

208 Message Security for Google Apps Administration Guide WARNING: Applying settings to suborgs also overwrites any existing content filters you’ve s

Content Manager 209Create or Edit a Content Manager FilterA content filter can contain up to three content rules and a message disposition (what Con

The Administration Console 21Troubleshooting the Administration ConsoleHow do I get another administrator account for a co-worker? You can create an

210 Message Security for Google Apps Administration Guide The Add Filter page appears (this example uses the Inbound page):4. Under Filter Name, ente

Content Manager 2113. Click the name of a filter you want to edit. For example:4. Edit information about the filter. For details, see “Content Manag

212 Message Security for Google Apps Administration Guide Specific word or phrase in the message bodyMatch: Any RuleSelect Location: BodySelect Filte

Content Manager 213Attachment of any type Match: Any RuleSelect Location: HeaderSelect Filter Type: contains textValue: Content-Disposition: attachm

214 Message Security for Google Apps Administration Guide Set Up a Compliance PolicyA compliance policy contains a lexicon (a predefined content filt

Content Manager 2153. Click the link for the compliance policy you want to set up:• Social Security Numbers• Credit Card NumbersThe policy setup pag

216 Message Security for Google Apps Administration Guide 7. Click Save.Note: For information about how report data is interpreted based on your conf

Content Manager 217Delete and Disable Content FiltersIf you want to stop using a content filter or compliance policy, you can do any of the followin

218 Message Security for Google Apps Administration Guide About Using Regular ExpressionsContent Manager includes a powerful string-matching tool cal

Content Manager 219Uses for Regular ExpressionsUsing regular expressions, you can create content filters that can find:• Text patternsUse this optio

22 Message Security for Google Apps Administration Guide

220 Message Security for Google Apps Administration Guide Character DescriptionAnchors^ (caret) Matches the start of the line or string of text that

Content Manager 221[^...] Matches any character not in the set of characters. For example:[^a-f] matches any character that’s not a letter from a to

222 Message Security for Google Apps Administration Guide [:space:] Matches all whitespace characters, including spaces, tabs, and line breaks.Note:

Content Manager 223Group(...) Groups parts of an expression. Use grouping to apply a quantifier to a group or to match a character class before or a

224 Message Security for Google Apps Administration Guide Content Manager Support for Regular ExpressionsContent Manager provides robust support for

Content Manager 225Range Limitations:Content Manager does not support the following types of ranges, because they could cause delays in processing y

226 Message Security for Google Apps Administration Guide Match Whole Word OnlyNote: You can also use the rule filter “matches any word in” to create

Content Manager 227Notes•\W matches any character that’s not a letter, digit, or underscore. It prevents the regex from matching characters before o

228 Message Security for Google Apps Administration Guide Match Word or Phrase in a ListNote: You can also use the rule filter “matches any word in”

Content Manager 229Match Word with Different Spellings or Special CharactersTip: For information about using regular expressions to match obfuscatio

Chapter 2 Organization Hierarchy & Design 23Organization Hierarchy & DesignChapter 2About the Organization HierarchyTo best manage users, you

230 Message Security for Google Apps Administration Guide Match Any Email Address from a Specific DomainNotes•[\w.+\-] matches any word character (a-

Content Manager 231Match Any IP Address in a RangeNotes•\W matches any character that’s not a letter, digit, or underscore. It prevents the regex fr

232 Message Security for Google Apps Administration Guide Match an Alphanumeric FormatNotes• The \ before each period “escapes” the period—that is, i

Content Manager 233How to Use Content Manager in a Spam OutbreakOn rare occasions, malicious senders create new junk messages that don’t have any te

234 Message Security for Google Apps Administration Guide Tip: Instead of looking for exact text, you can look for a unique text pattern in the junk

Content Manager 235Use Multiple Regular Expressions for a FilterYou can enter up to three regular expressions for a filter—one expression per filter

236 Message Security for Google Apps Administration Guide Note: Alternatively, you can often create a single, more complex expression that matches ma

Content Manager 2373. Add a new custom filter with the following properties:• Filter Status: ON• Rules:Match: Any RuleSelect Location: RecipientSele

238 Message Security for Google Apps Administration Guide To create a custom filter that deletes other null-sender messages:1. Under Rules, set Match

Content Manager 239A content filter captured messages that don’t contain any words, phrases, or patterns I specified in the filter rules. Why? If th

24 Message Security for Google Apps Administration Guide As new users, user aliases, and domain aliases are created in your Google Apps account, they

240 Message Security for Google Apps Administration Guide Content Manager ReferenceContent Manager Filter ListUse this page to view Content Manager s

Content Manager 241See:• “Social Security Numbers Policy” on page 250• “Credit Card Numbers Policy” on page 252Create or Edit a Content Filter:Creat

242 Message Security for Google Apps Administration Guide Quarantine AdministratorSpecify the email address of the administrator who receives message

Content Manager 243Content Manager Filter SettingsUse this page to:• Create a new content filter, or edit an existing filter.• Delete a content filt

244 Message Security for Google Apps Administration Guide Select Location Select the part of the message you want Content Manager to scan:• Subject L

Content Manager 245Select Filter TypeSelect the scanning method that Content Manager uses for this filter.• starts with: If text in the specified lo

246 Message Security for Google Apps Administration Guide Select Filter Type (cont)• does not match regex: If the text in the specified location does

Content Manager 247Value Enter the content for which you want Content Manager to scan messages.If you selected a filter type of starts with, ends wi

248 Message Security for Google Apps Administration Guide Message DispositionsField ValueRouting Deliver: Sends the message to the recipient’s inbox

Content Manager 249Test Regular ExpressionCopy to QuarantineCopies any message that matches the filter to the specified quarantine addresses:• Quara

Organization Hierarchy & Design 25Hierarchy ConfigurationsFor the message security service to filter users’ email, it has to know about their e

250 Message Security for Google Apps Administration Guide Social Security Numbers PolicyUse the Social Security Numbers Policy page to:• Turn the pol

Content Manager 251About the Social Security Numbers LexiconThe Social Security Numbers lexicon is a predefined filter that finds U.S. social securi

252 Message Security for Google Apps Administration Guide Filter StatusSet this policy to ON or OFF. If you turn the policy off, the Disposition sett

Content Manager 253About the Credit Card Numbers LexiconThe Credit Card Numbers lexicon is a predefined filter that finds credit card numbers in ema

254 Message Security for Google Apps Administration Guide Filter StatusSet this policy to ON or OFF. If you turn the policy off, the Disposition sett

Chapter 12 Approved and Blocked Sender Lists 255Approved and Blocked Sender ListsChapter 12About Sender ListsYou can approve or block specific sender

256 Message Security for Google Apps Administration Guide At the user level in the Message Center, you can configure:• Approved Senders (individual e

Approved and Blocked Sender Lists 257Approved DomainsMessages from an approved domain are delivered to user inboxes, regardless of spam-like content

258 Message Security for Google Apps Administration Guide Industry Heuristics and the Blocked Sender ListIf an organization has Industry Heuristics t

Approved and Blocked Sender Lists 259How Senders Are IdentifiedThe service identifies an approved or blocked sender by looking at the address in the

26 Message Security for Google Apps Administration Guide Hierarchy with Multiple User OrgsIf some users have unique service requirements, you can cre

260 Message Security for Google Apps Administration Guide 4. Enter an email address or domain into the Approved Senders or Blocked Senders field, the

Approved and Blocked Sender Lists 2615. Enter an email address or domain into the Approved Senders, Blocked Senders, or Approved Recipients field, t

262 Message Security for Google Apps Administration Guide Click Update Blocked Domains.Size Limits for Sender ListsThe maximum number of characters f

Approved and Blocked Sender Lists 263The batch-command syntax to remove an address or domain from an approved/blocked sender list is as follows:modi

264 Message Security for Google Apps Administration Guide 2. For delivered messages that seem to establish a trend, research the messages (your resea

Approved and Blocked Sender Lists 265Troubleshooting: Approved/Blocked Senders and Mailing ListsWhy is it that some obvious spam messages are occasi

266 Message Security for Google Apps Administration Guide Why is a domain or address added to the approved/blocked sender list not approved or blocke

Approved and Blocked Sender Lists 267Filtering was working fine, then suddenly much more spam made it through the filter for a particular user. Most

268 Message Security for Google Apps Administration Guide When a I attempt to add or remove an entry from a sender list, I see the error “A request c

Approved and Blocked Sender Lists 2693. Click the user whose sender lists you want to edit.4. Under Inbound Services, click Sender Lists.To edit App

Organization Hierarchy & Design 27You might group users by geography; by their department or role in the company; by the security services they

270 Message Security for Google Apps Administration Guide

Chapter 13 Attachment Manager 271Attachment ManagerChapter 13About Attachment ManagerUse Attachment Manager to filter messages based on the size or f

272 Message Security for Google Apps Administration Guide • With the exception of Early Detection filters, messages must pass other filters before At

Attachment Manager 273Note that binary scanning now identifies Microsoft Office 2007 file types. If binary scanning cannot determine the file type o

274 Message Security for Google Apps Administration Guide Following are technical details for the compressed file scanning feature:• Compressed file

Attachment Manager 275Configure Attachment ManagerThe Attachment Manager settings are made at the organization level. You can configure Attachment M

276 Message Security for Google Apps Administration Guide 5. Configure notifications for messages that trigger Attachment Manager filters. By default

Attachment Manager 277Create / Edit Attachment Manager FiltersYou create attachment filters on the Attachment Manager Filters page:1. Go to Orgs and

278 Message Security for Google Apps Administration Guide 5. Enter file types in the Custom File filters. These filter are most useful if you’re filt

Attachment Manager 279When creating the filter, select a disposition, as follows:If a message triggers more than one filter, the disposition of the

28 Message Security for Google Apps Administration Guide Distribute Administrative Control To distribute management of user groups across several adm

280 Message Security for Google Apps Administration Guide Scanning OptionsBinary scanning is an optional method for identifying file attachments; it

Attachment Manager 281Custom File Types FilterEnter Custom File Types to filter only a few file types (rather than the collection included in System

282 Message Security for Google Apps Administration Guide Productivity Filters check for office documents such as Microsoft Word or Excel, or media f

Attachment Manager 283How do you limit file size of attachments?Set the maximum attachment size using the Message Size filter as described in “Messa

284 Message Security for Google Apps Administration Guide

Chapter 14 Industry Heuristics 285Industry HeuristicsChapter 14About Industry HeuristicsIndustry Heuristics is an optional feature. For more informat

286 Message Security for Google Apps Administration Guide When Industry Heuristics are turned on, additional information is included in the x-pstn he

Industry Heuristics 2876. Set Transport Heuristics to On or Off.7. Click the propagation checkbox to apply settings and filters to existing sub-orgs

288 Message Security for Google Apps Administration Guide

Chapter 15 Test Tools & Mail Flow Troubleshooting 289Test Tools & Mail Flow TroubleshootingChapter 15About Test Tools & Mail Flow Trouble

Organization Hierarchy & Design 29Provide Access to ServicesIf some users need access to different services, enable or disable the service for t

290 Message Security for Google Apps Administration Guide To run the MX Record Test by batch file:See the testmx command in the “Commands” chapter of

Test Tools & Mail Flow Troubleshooting 291See the table below for details on which errors you may run into, and the next steps you should take.E

292 Message Security for Google Apps Administration Guide Troubleshoot Incoming Email DeliveryA mail delivery emergency is when some or all of your u

Test Tools & Mail Flow Troubleshooting 293This step checks whether the MX records that route your email to the message security service are conf

294 Message Security for Google Apps Administration Guide

Chapter 16 Transport Layer Security 295Transport Layer SecurityChapter 16About the Inbound Servers TabYou can set use the Inbound Servers tab to set

296 Message Security for Google Apps Administration Guide Setting Up Transport Layer SecuritySet up Transport Layer Security using the Administration

Transport Layer Security 297The key features of TLS are:• Encrypted messages: TLS uses Public Key Infrastructure (PKI) to encrypt messages from mail

298 Message Security for Google Apps Administration Guide This diagram shows the flow of TLS messages between servers:• Stage 1: The sending server s

Transport Layer Security 299Message Processing and EncryptionThe following describes message flow, encryption, and message filtering for incoming TL

3library. Credit must be given in user-accessible documentation. This software is provided “AS IS.” The copyright holders disclaim all warranties, e

30 Message Security for Google Apps Administration Guide Similarly, some Default User settings shouldn’t be changed for individual users, if they def

300 Message Security for Google Apps Administration Guide 4. Google Apps Mail sends certificate information (including the public key for encryption)

Transport Layer Security 301For TLS connections between the message security service and Google Apps Mail, you may use either self-signed or authori

302 Message Security for Google Apps Administration Guide 2. Choose a setting for TLS delivery from the message security service to Google Apps Mail.

Transport Layer Security 303If a message is sent via TLS, the message security service delivers the message via TLS to Google Apps Mail if possible,

304 Message Security for Google Apps Administration Guide 4. Click Save.Transport Layer Security for Outbound MailThis section provides a technical o

Transport Layer Security 3052. Choose the Outbound TLS settings. To do this, you must select how the message security service accepts outbound messa

306 Message Security for Google Apps Administration Guide The second outbound TLS setting enables you to choose how the message security service send

Transport Layer Security 307• Send only TLS: Send all messages by TLS. Mail sent to recipient servers that do not support TLS will be deferred.• Sen

308 Message Security for Google Apps Administration Guide Features and BenefitsPolicy Enforced TLS provides the following benefits:• Support for Tran

Transport Layer Security 309This diagram shows the flow of TLS messages between servers:• Stage 1: The sending server sends a message via TLS to the

Organization Hierarchy & Design 31Default User SettingsWhen a new user is added to the message security service, it gets certain user-level sett

310 Message Security for Google Apps Administration Guide This diagram shows the flow of TLS messages between servers:• Stage 1: The first connection

Transport Layer Security 311Setting Up Policy Enforced TLSSet up inbound Policy Enforced TLS and outbound Policy Enforced TLS separately.WARNING: If

312 Message Security for Google Apps Administration Guide 2. If TLS is set to “Accept only SMTP” or “Send only SMTP”, change your settings to allow T

Transport Layer Security 313WARNING: If set up improperly, Certificate Validation can interrupt mail flow. Check your settings and certificates befo

314 Message Security for Google Apps Administration Guide Certificate Validation settings are described below.TLS CertificationDescriptionEncrypt Onl

Transport Layer Security 315Change the Default Certificate Validation SettingYou can change the default setting as well. When you add a new domain t

316 Message Security for Google Apps Administration Guide TLS AlertsIf you use Policy Enforced TLS, set up TLS Alerts in the Batch page so that you w

Transport Layer Security 317orgname is the name of your admin user organization.This command will show all fields for the organization. Check the tl

318 Message Security for Google Apps Administration Guide This message is an automated alert from your email security service.The email security serv

Transport Layer Security 319Outbound Mail (Remote)When Policy Enforced TLS blocks an outbound message because the email protection service could not

32 Message Security for Google Apps Administration Guide WARNING: Don’t change User Access permissions for an individual user. Manage User Access at

320 Message Security for Google Apps Administration Guide This message is an automated alert from your email security service.Your email security ser

Chapter 17 Reports 321ReportsChapter 17About Reports Reports provide visibility into the traffic patterns across your organization. The Administratio

322 Message Security for Google Apps Administration Guide 2. Select the organization from the pull-down list. The total number of registered users in

Reports 3236. To download a report, click the Download link located in the upper right corner of the screen. The report is opened in a new browser w

324 Message Security for Google Apps Administration Guide Summary by Domain BytesThis report displays the total bytes processed for various types of

Reports 325Traffic ReportsTraffic Reports give you visibility into traffic sources and destinations for messages that are quarantined or forwarded t

326 Message Security for Google Apps Administration Guide Traffic by Domain (Outbound)Outbound mail traffic information for the domains in the select

Reports 327Traffic by Recipient (Inbound)This report shows inbound mail traffic information for the users in the selected organization.Two types of

328 Message Security for Google Apps Administration Guide Inbound Traffic Reports and Non-Account Virus BlockingNon-Account Virus Blocking protects y

Reports 329Traffic Activity Log (Outbound)The Outbound Traffic logs show the detailed data for outgoing messages.The logs contain data from 20 minut

Organization Hierarchy & Design 33Support address / time zoneDefault User assignmentThe Default User applied to new usersIndustry Heuristics Mes

330 Message Security for Google Apps Administration Guide Spam ReportsSpam Reports give a list of the domains that are sending spam, the users receiv

Reports 331Spam by Filter Name (Inbound)Number of messages quarantined by each category filter.Effective Catch Rate (Inbound)Number of messages per

332 Message Security for Google Apps Administration Guide Effective Catch Rate by Org (Inbound)Number of messages per org identified as spam, how man

Reports 333Spam by Account (Inbound)Spam statistics at the account level. This includes most of the same fields as the Spam by Domain (Inbound), and

334 Message Security for Google Apps Administration Guide Email Authentication Reports (SPF Check)Some organizations publish Sender Policy Framework

Reports 335SPF by Recipient DomainTwo types of inbound SPF by Recipient Domain reports are available. One report aggregates all messages for sub-dom

336 Message Security for Google Apps Administration Guide Virus by Sender IP (Inbound)Per sender IP, the total number of quarantined viruses and the

Reports 337Virus by Account (Inbound)Per account, the number of viruses quarantined, the total byte size of quarantined viruses, the number of virus

338 Message Security for Google Apps Administration Guide Virus by Virus Name (Inbound)By virus name, the number of quarantined messages containing t

Reports 339Attachments by Domain (Inbound)Per domain, the number of messages with attachments, and how those messages were handled by the system.Two

34 Message Security for Google Apps Administration Guide

340 Message Security for Google Apps Administration Guide Attachments by Domain (Outbound)Per domain, the number of messages with attachments, and ho

Reports 341Attachments by Account (Outbound)Per sending account, the number of messages with attachments, and how those messages were handled by the

342 Message Security for Google Apps Administration Guide Content Manager ReportsContent Manager is an optional feature; whether the Content Manager

Reports 343Domain/Account (Outbound)By domain or account, the number of messages caught by your filters, and how those messages were handled by the

344 Message Security for Google Apps Administration Guide Filter Name (Inbound, Outbound)The filter by which messages were caught, the disposition ap

Reports 345The following logs are available:The logs show data from 20 minutes prior. The timestamps are in GMT. The log contains a maximum of 5,000

346 Message Security for Google Apps Administration Guide Message Encryption Activity Log (Outbound)Message Encryption Logs are daily or weekly repor

Reports 347Two types of inbound Archiving by Domain reports are available. One report aggregates all messages for sub-domains and aliased domains to

348 Message Security for Google Apps Administration Guide Quarantine Delivery ReportsActivity Log (Inbound)Quarantine Delivery Activity Logs are dail

Reports 349The following logs are available:TLS ReportsTLS (Transport Layer Security) is an optional feature; whether the TLS Reports are displayed

Chapter 3 Organization Management 35Organization ManagementChapter 3About Organization ManagementYou manage your users’ email protection by arranging

350 Message Security for Google Apps Administration Guide TLS by Domain/Account (Outbound)By domain or account, the total number and size of messages

Reports 351Policy-Enforced TLS by Domain (Inbound, Outbound)By domain, the number and size of messages transmitted by Policy-Enforced TLS that passe

352 Message Security for Google Apps Administration Guide Why does a domain show up in an organization report when that domain is not located in that

Reports 353Blocked Servers are messages quarantined because the domain was listed in a Blocked Senders list, not a specific address.

354 Message Security for Google Apps Administration Guide

Chapter 18Message Log SearchChapter 18About Message Log SearchAs the message security service processes your messages, data about these messages is ca

356 Message Security for Google Apps Administration Guide About the DataNote the following about Log Search data:• Message Log Search data is availabl

Message Log Search 3577. To grant access to Log Search, select the Log Search check box in the Modify column. Clear this check box if you want to di

358 Message Security for Google Apps Administration Guide • Subject: Find Log Search results by entering an exact or partial subject. Searches by subj

Message Log Search 359• Org ID: Unique number from the message security service that identifies the sender’s Org ID for an outbound message or the r

36 Message Security and Discovery Administration Guide You can list organizations:• Along with links to related commands.• Along with a summary of se

360 Message Security for Google Apps Administration Guide To run a Log Search:1. From the Log Search tab, choose an organization from the Choose Org d

Message Log Search 361Note: The “Message ID” is a unique number for the message security service that identifies a specific message. It differs from

362 Message Security for Google Apps Administration Guide Examples:to:[email protected] AND from:[email protected]:[email protected]

Message Log Search 363Disposition Description: Specifies how the message was processed after passing through the message security service filters. F

364 Message Security for Google Apps Administration Guide Disposition (cont.) Tag And Delivered - The message security service delivers the message wi

Message Log Search 365Message Details PageThe following additional fields and values are displayed when you click a Message ID link on the search re

366 Message Security for Google Apps Administration Guide Archive Source Description: The source of the archived message -- for example, from mail flo

Message Log Search 367Attachment Sender ApprovedDescription: An Attachment Manager filter was triggered, but the message was allowed through because

368 Message Security for Google Apps Administration Guide Attachment Type Description: Type of attachment that triggered an Attachment Manager filter.

Message Log Search 369CM Result Indicates the Content Manager disposition.Values:Approved - Message was delivered to the recipient only, or it was d

Organization Management 37List Organization SummariesTo instead list orgs along with details about their service, click the Summary Settings link (u

370 Message Security for Google Apps Administration Guide Disposition Filter Description: Displays which filter set the final disposition of the messa

Message Log Search 371Finance score Financial-industry heuristics filter (see “Spam Scores” on page 403 and “Enable and Adjust Spam Filters” on page

372 Message Security for Google Apps Administration Guide Proxy Description: Specifies the proxy server for the message security service that processe

Message Log Search 373Sender TLS Description: Specifies whether a message was processed using transport layer security (TLS). If TLS is on, this fie

374 Message Security for Google Apps Administration Guide Spam Result Description: Indicates the spam disposition.Values:Approved - Message was allowe

Message Log Search 375User ID Description: Unique number from the message security service that identifies the sender of an outbound message or the

376 Message Security for Google Apps Administration Guide Common Log Search ScenariosThe most common search scenarios are presented below. Each sectio

Message Log Search 3772. On the search results page, look for the message and view the results in the Disposition column:• If Delivered, the message

378 Message Security for Google Apps Administration Guide 2. On the search results page, look for the message and view the results in the Disposition

Message Log Search 379To track all messages for a sender or recipient, follow these steps:1. From the Log Search page, run the following query:• Ent

38 Message Security and Discovery Administration Guide List Organizations with DomainsEach user organization has a domain associated with it. This as

380 Message Security for Google Apps Administration Guide However, to analyze filter settings and determine the cause of a message being delivered or

Chapter 19 Batch Processing 381Batch ProcessingChapter 19About Batch ProcessingBatch processing is a quick and efficient method to perform a large nu

382 Message Security for Google Apps Administration Guide When To Use BatchAuthority privileges determine which batch commands an administrator can r

Appendix A Customizing Notifications 383Customizing NotificationsAppendix AAbout Customizing User NotificationsAlthough it is not necessary to edit n

384 Message Security for Google Apps Administration Guide 3. On the User Notifications page, click the link to a notification. For example, click the

Customizing Notifications 385Keep in mind that the “stock” notification and the “default” notification are not the same. The stock notification is w

386 Message Security for Google Apps Administration Guide If you have enabled the Quarantine Summary, you will see these editing options:5. Click the

Customizing Notifications 387For example, you should use the token for the “From” address rather than hardcoding an actual support address. Then if

388 Message Security for Google Apps Administration Guide 3. After the Subject of the e-mail, leave a blank line and then include the following HTML

Customizing Notifications 389The “From:”, “To:” & “Subject:” lines must be at the top of a custom notification, since they are used as the actua

Organization Management 39Show Orgs in a Popup WindowKeep access handy to all organizations from a popup window that can always stick around. Note:

390 Message Security for Google Apps Administration Guide <-date->The timestamp indicating the date and time the notification was sent.<-fro

Customizing Notifications 391When using the above string in your notification, the user would only need to enter a password to log in after clicking

392 Message Security for Google Apps Administration Guide Once you log in, you will be asked to change the temporary password. If you require additi

Customizing Notifications 393where the URL is the location of the Widget for your organization.)My First Spam NotificationUsers receive this message

394 Message Security for Google Apps Administration Guide The return address, referenced as your organization's Support Contact in the “Support

Customizing Notifications 395where the URL is the location of the Widget for your organization.)New Spam NotificationYour users receive the New Spam

396 Message Security for Google Apps Administration Guide ** Log in now to review suspicious messages sent to your account. *************************

Customizing Notifications 397Virus Alert Default NotificationYour users receive the Virus Alert whenever a virus-infected message is quarantined wit

398 Message Security for Google Apps Administration Guide <-date->The timestamp indicating the date and time the notification was sent.<-fro

Customizing Notifications 399Dear <-address->,Your value-added email services are now DISCONTINUED. Any suspicious messages that may have bee

4 Message Security for Google Apps Administration Guide

40 Message Security and Discovery Administration Guide Choosing an org while on the Organizations page (which lists all your orgs), narrows the list

400 Message Security for Google Apps Administration Guide Used as the location to send notifications as found on each user's user record.Note: B

Appendix B Interpreting Header Fields 401Interpreting Header FieldsAppendix BAbout Header FieldsWhen messages are processed by the message service,

402 Message Security for Google Apps Administration Guide To open the full header in Google Apps:1. Log in to Gmail.2. Open the message whose header

Interpreting Header Fields 403Spam Filters• S = General/bulk spam score• CV = Internal use only. This has no effect on the overall spam score or mes

404 Message Security for Google Apps Administration Guide If a message scores as blatant spam, the BSB disposition of bounce or blackhole results in

Interpreting Header Fields 405The first number is the user's Bulk Filter (base) spam setting:• 1= lenient• 2= less lenient• 3= moderate• 4=

406 Message Security for Google Apps Administration Guide X-pstn-2strike Header FieldAn exception to the spam score and threshold calculations is the

Interpreting Header Fields 407X-pstn-neptune-rslt: passYou may also see the following header field, which indicates that the message has suspicious

408 Message Security for Google Apps Administration Guide The score for legal content category appears levels line, LC: 0.1839. The score is less tha

Interpreting Header Fields [email protected] is the From address used in evaluating the user’s approved- and blocked-sender lists. If the add

Organization Management 41Inbound ServicesInbound Services Description Enable/disable Blatant Spam Blocking for the organization, and set a spam di

410 Message Security for Google Apps Administration Guide X-pstn-nxpr and X-pstn-nxp Header FieldsWhen messages are delivered to Google Gmail, these

Interpreting Header Fields 411X-pstn-levels: (S: 0.46800 R:95.91081 P:95.91081 M:99.85141 C:55.44761 )X-pstn-settings: 5 (2.00000:8.00000) r p m C X

412 Message Security for Google Apps Administration Guide

Index 413IndexAAdministration ConsoleChoose Org list 39Choose Org pull-down 20Home page 14logging in 13Message Composition chart 19navigating 19pass

414 Message Security for Google Apps Administration Guide multiple record updates 90organization hierarchy relationship 87organization policy authori

Index 415DDefault Userconfiguring 31, 64overview 63distribution lists 79documentation, related 12domains 129Eemail servers. See Inbound Serversevent

416 Message Security for Google Apps Administration Guide hierarchy 35ID 44junk email settings 140list domains 37Message Center subject links 49messa

Index 417Virus by Domain, inbound 336Virus by Domain, outbound 336Virus by Sender IP, inbound 336Virus by Virus Name, inbound 338Virus by Virus Name

418 Message Security for Google Apps Administration Guide X-pstn-levels 402X-pstn-neptune 406X-pstn-nxp 410X-pstn-nxpr 410X-pstn-settings 404X-pstnvi

42 Message Security and Discovery Administration Guide Outbound ServicesAll outbound services are optional features that aren’t available with all se

Organization Management 43Control what settings users in this org have permission to view or modify at their Message Center. See “Enable / Disable M

44 Message Security and Discovery Administration Guide Organization SummaryCreate an OrganizationTo apply separate email policies or services for an

Organization Management 45The name in the gray bar changes, indicating that you’re now looking at your new org’s settings, which were copied from th

46 Message Security and Discovery Administration Guide Find an OrganizationYou can quickly find any organization by typing its name in a search form,

Organization Management 47To limit daily number of messages that users in an organization can receive, go to Message Limits on the org’s Management

48 Message Security and Discovery Administration Guide Organization IDA unique ID for this org, useful when escalating an issue to Support. An org’s

Organization Management 49Non-Account BouncingWhen Non-Account Bouncing is on, messages are bounced if they are not addressed to a registered user o

Contents 5ContentsAbout This Guide 11Welcome to the Administration Guide 11Online Help 12Additional Documentation for the Postini for Google Apps Se

50 Message Security and Discovery Administration Guide Time ZoneIf users in this organization receive a regularly scheduled Quarantine Summary notifi

Organization Management 51Handle Mail to Unrecognized AddressesOnce you add a domain to the message security service, all email to that domain is ro

52 Message Security and Discovery Administration Guide Move an OrganizationYou can move an organization to a new location in your organization hierar

Organization Management 53You can download settings for one or more organizations as text. Then import the text into a spreadsheet, for easy referen

54 Message Security and Discovery Administration Guide

Chapter 4 Users and Quarantines 55Users and QuarantinesChapter 4About Users and QuarantinesA user is an email address in Gmail that has been added to

56 Message Security for Google Apps Administration Guide View All Your UsersView a list of users currently receiving email protection under Orgs and

Users and Quarantines 57List Many UsersWhen you first open the Users page, it lists users by address only, allowing you to scan many users at once.

58 Message Security for Google Apps Administration Guide List User SummariesTo list users along with details about their settings, click the Settings

Users and Quarantines 59List Users by OrganizationTo list users in a particular organization but not in any of its sub-orgs:1. Open the Users page a

6 Message Security for Google Apps Administration Guide Troubleshoot Organizations 53Chapter 4: Users and Quarantines 55About Users and Quarantines

60 Message Security for Google Apps Administration Guide Basic SearchTo search from the Users page:1. Click the Orgs and Users tab.2. Click the Users

Users and Quarantines 61This search lists all users in the domain postqa7.com:• User Shortcut This is also like searching from User pages, except en

62 Message Security for Google Apps Administration Guide This example shows how to find all users and user aliases/nicknames, in the current org or i

Users and Quarantines 63Search Text TipsWhen you search for users, you can enter a partial address as a shortcut or to narrow your search to users w

64 Message Security for Google Apps Administration Guide How Default Users WorkInitially, there is one Default User, [email protected], in your

Users and Quarantines 652. Click the user name to open its Overview page.3. Click the feature you want to modify, make your changes, and click Save.

66 Message Security for Google Apps Administration Guide Senders ListsAllowed or Blocked Senders Don’t add any senders to these lists. To apply commo

Users and Quarantines 67Create a Default UserTo apply different user settings across an organization—say, to give the Sales org more lenient spam fi

68 Message Security for Google Apps Administration Guide To create a new Default User:1. Create the user in the Google Apps Control Panel.To identify

Users and Quarantines 69To delete a default user:1. Remove the Default User from all orgs’ General Settings.2. Use the Google Apps Control Panel to

Contents 7User Settings for Notifications 155Disabling and Redirecting Notifications 156About Quarantine Summary 158Configuring the Quarantine Summa

70 Message Security for Google Apps Administration Guide Users retain their existing user-level settings, but acquire new org-level settings from the

Users and Quarantines 71Suspend or Reset a UserOn the User Overview page, you can:• Suspend a User: Stops all filtering and protection for the user,

72 Message Security for Google Apps Administration Guide User SettingsMessage Limits: Track how many messages this user receives for the current day.

Users and Quarantines 73SummaryThe Summary box (to the right of Inbound Services) contains the following information:Aliases: If a user receives ema

74 Message Security for Google Apps Administration Guide Manage Quarantined MessagesIncoming messages filtered as spam or otherwise diverted from del

Users and Quarantines 75Quarantine Messages CentrallyInstead of quarantining each user’s suspicious messages separately, you can collect all users’

76 Message Security for Google Apps Administration Guide 2. Select the type of quarantined traffic you want to view:• All: Messages that are currentl

Users and Quarantines 77Tip: Click a column heading to sort the messages by that heading.Open Quarantined MessagesYou can safely view the content of

78 Message Security for Google Apps Administration Guide 2. To delete the selected messages, click Delete.3. To deliver the selected messages, select

Users and Quarantines 79User General SettingsUnder General Setting on a user’s Overview page, you can manage the user’s primary address and organiza

8 Message Security for Google Apps Administration Guide Using Batch Commands for Approved/Blocked Lists 262Deciding Which Approved Senders to Add 263

80 Message Security for Google Apps Administration Guide WARNING: Do not add the mailing list as a user account. Under these circumstances, the maili

Users and Quarantines 81Select the mailing list user. Under Settings, click Notifications. Add the list owner’s email address to the Notification ad

82 Message Security for Google Apps Administration Guide Download Users and SettingsFrom the Users or User Summaries page, you can download a text li

Users and Quarantines 83Filter GetRichGet Rich Quick category filter setting for the userSame scale as Filter AdultFilter OffersSpecial Offers categ

84 Message Security for Google Apps Administration Guide Troubleshoot UsersHow do I protect internal distribution or mailing lists from spam and viru

Users and Quarantines 857. Load the file created in Step 6 into a text editor and replace all occurrences of “modifyuser,” with “modifyuser “to remo

86 Message Security for Google Apps Administration Guide The limit is configured there.Changing this limit does not restore mail flow to the user.How

Chapter 5 Administrators 87AdministratorsChapter 5About Administrators and AuthorizationAdministrators have access to the Administration Console wher

88 Message Security for Google Apps Administration Guide Authority Privilege PropagationIn an organization hierarchy, administrator privileges are pr

Administrators 89A peer administrator can modify and delete another administrator’s privileges, if it is assigned to the same organization, by click

Contents 9Summary Reports 323Traffic Reports 325Spam Reports 330Email Authentication Reports (SPF Check) 334Virus Protection Reports 335Attachment M

90 Message Security for Google Apps Administration Guide 3. At the Systems organization, our administrator has a new authorization record with privil

Administrators 911. Examples of initial inheritance and a sub-organization record change:a. The top-level authorization record assigned to the New Y

92 Message Security for Google Apps Administration Guide Create Administrators and Manage Authorization RecordsWhen you create an administrator:• Che

Administrators 93Note: An account administrator, with the Assign Peer Authority privilege enabled, can create and change settings for a peer account

94 Message Security for Google Apps Administration Guide WARNING: Modifications to the authorization record take effect immediately. Unlike modifying

Administrators 95Example of results by address:Note: Administrators who have authorization records in the same organization (peer administrators) ca

96 Message Security for Google Apps Administration Guide Types of AdministratorsTo simplify the range of possible administrator configurations, this

Administrators 97Account AdministratorsAn account administrator manages the top-level account organization and is fully authorized to perform almost

98 Message Security for Google Apps Administration Guide Positioning Account Authorization RecordsThe account administrator’s authorization record is

Administrators 99In the following example, fully authorized email administrators are assigned to organizations below the account level. These admini