How To Scan Email Locations

This section covers the following topics:

• Supported Email Locations
• Licensing
• Scan Locally Stored Email Data
• Scan IMAP/IMAPS Mailbox
• Scan HCL Notes

Supported Email Locations

• Locally Stored Email Data
• IMAP/IMAPS Mailbox
• HCL Notes

Licensing

For Sitewide Licenses, all scanned email Targets consume data from the Sitewide License data allowance limit.

For Non-Sitewide Licenses, email Targets require Client Licenses, and consume data from the Client License data allowance limit.

See Target Licenses for more information.

Scan Locally Stored Email Data

When running a local storage and local memory scan (refer to the Scan Local Storage and Local Memory section), ER Cloud detects and scans offline email data stores and data files for sensitive data. ER Cloud does not scan data files locked by the email server.

Scanning a locally stored email data file may produce matches from ghost records or slack space that you are not able to find on the live email server itself.

Scan IMAP/IMAPS Mailbox

To scan IMAP/IMAPs mailboxes, check that your system meets the following requirements:

Add an IMAP/IMAPS Mailbox Target

1. From the New Scan page, add Targets. Refer to the Add Targets section.
2. In the Enter New Target Hostname field, enter the name of the IMAP/IMAPS server for the mailbox you want to scan.
3. Select the IMAP mailbox type to set up:
   1. IMAP: Select Email > Internet Mailbox.
   2. IMAPS (IMAP over SSL): Select Email > Internet SSL Mailbox.
      

4. In the Internet Mailbox or Internet SSL Mailbox page, fill in the following fields:
   

   Field	Description
   Path	Enter the email address that you want to scan. For example, <user_name@domain_name.com>.
   New Credential Label	Enter a descriptive label for the credential set.
   New Username	Your internet mailbox user name.
   Password	Your internet mailbox password.
   Agent to act as proxy host	Select a Proxy Agent host with direct Internet access.

   Recommended Least Privilege User Approach

   Data discovery or scanning of data requires read access. Remediation actions that act directly on supported file systems including Delete Permanently, Quarantine, Encryption and Masking require write access in order to change, delete and overwrite data.

   To reduce the risk of data loss or privileged account abuse, the Target credentials provided for the intended Target should only be granted read-only access to the exact resources and data that require scanning. Never grant full user access privileges or unrestricted data access to any application if it is not required.

5. Click Test. If ER Cloud can connect to the Target, the button changes to a Commit button.
6. Click Commit to add the Target.

Scan HCL Notes

To scan HCL Notes mailboxes, check that your system meets the following requirements:

Add a Notes Mailbox Target

1. From the New Scan page, add Targets. Refer to the Add Targets section.
2. In the Enter New Target Hostname field, enter the host name of the Domino server that the Target Notes mailbox resides on.
3. Click Test. If ER Cloud can connect to the Target, the button changes to a Commit button.
4. Click Commit to add the Target.
5. In the Select Types dialog box, select Email > HCL Notes.
6. Fill in the fields as follows:
   

   Field	Description
   Path	Enter the path to scan. Use the following syntax: <user_name/domino_domain> is your Notes user name. Refer to the Identify Notes User Name section below. Scans all resources available for user credentials provided. Syntax: Leave Path blank. Scans all resources available for the user name provided. Syntax: <user_name/domino_domain> Example: administrator/exampledomain Scans a specific path available for the user credentials provided. Syntax: <user_name/domino_domain/path> Example: administrator/exampledomain/mail You can specify a specific server partition to connect to. Syntax: (partition=<server_partition_name>) Example: (partition=serverPartitionA) Specify a server partition when: Connecting to a specific server partition in a Domino domain. The target Domino server has a server name that is different from its host name. To connect to a specific path in serverPartitionA on a Domino server, enter: (partition=serverPartitionA)/administrator/exampledomain/mail/administ.nsf.
   New Credential Label	Enter a descriptive label for the credential set.
   New Username	Your Notes user name. Refer to the Identify Notes User Name section below.
   New Password	Your HCL Notes password.
   Agent to act as proxy host	Select a Proxy Agent that resides on a Proxy host with the appropriate HCL Notes client installed.

   Recommended Least Privilege User Approach

   To reduce the risk of data loss or privileged account abuse, the Target credentials provided for the intended Target should only be granted read-only access to the exact resources and data that require scanning. Never grant full user access privileges or unrestricted data access to any application if it is not required.

7. Click Test. If ER Cloud can connect to the Target, the button changes to a Commit button.
8. Click Commit to add the Target.

Identify Notes User Name

To find your Notes user name:

1. Open the Notes client.
2. From the menu bar, select File > Security > User Security.
3. A password prompt opens. In the prompt, your Notes user name is displayed in the format <user_name/domino_domain>.
   
4. If no password prompt opens, find your Notes user name in the User Security screen.