Comodo Help
Find the desired product help
Comodo KoruMail

Comodo KoruMail

Admin Guide Version

English

Print Help Download Help
Profile Management > Add And Configure A New Profile
  • Introduction To KoruMail Secure Email Gateway
  • Korumail Deployment Process
  • Access The System
    • Access Via CLI Console
    • Access Via Web Console
    • The Main Interface
  • The Dashboard
    • System Usage Graphics
    • About Software
    • Change Your Password
  • User Management
    • Manage Admins And End Users
      • Manage Admins
      • Manage End Users
    • Manage Groups
  • System Configurations
    • Network Configuration
      • Interfaces
      • Network Settings
      • Network Time Protocol (NTP)
      • Timezone
      • Static Routes
      • Simple Network Management Protocol SNMP
    • Services
    • Licenses
    • Configure System Settings
      • System General Settings
      • Cache Settings
      • Session Settings
      • GUI Customization
      • System Backup
      • System Restore
      • Log Upload Settings
      • Postmaster Settings
      • SMTP TLS Settings
      • Update Database
      • Syslog Server
    • Logs
      • Log Files
      • Purge Files
    • Tools
      • Check Connectivity
      • Clear SMTP Queue
    • Session Reports
    • System Usage Statistics
  • SMTP Configuration
    • SMTP (Send E-Mail Protocol) Settings
      • General Settings
      • Advanced Settings
      • Outbound Delivery Queue
    • Manage Domains
      • Manage Domain Names
      • Manage Domain Routes
      • Manage Smart Hosts
      • Default Domain Routing
    • KoruMail SMTP AUTH Connector
      • SMTP Authentication Settings
      • Block Users
      • Anomaly Detection
    • LDAP/Local DB/My SQL User Database
      • LDAP Profile
      • Local DB Users
      • My SQL User Database
    • Greylist
      • Greylist Ignored IP Addresses/Domains
    • Manage RBL Servers
    • Disclaimer
    • SMPT Relay
    • DomainKeys Identified Mail (DKIM)
    • Outgoing SMTP Limits
    • Incoming SMTP Limits
  • Modules
    • Anti-spam
      • Anti-spam General Settings
      • Authorized Trainers
      • Advanced Anti-spam Settings
      • Bayesian Training
      • Content Filter
      • Signature Whitelist
      • Attachment Filter
    • Anti-Virus
      • Anti-Virus General Settings
      • Advanced Anti-Virus Settings
    • KoruMail Reputation Network (KRN)
    • Anti-Spoofing
    • SMTP IPS/FW
      • SMTP IPS General Settings
      • Whitelist IP Addresses
      • Blocked IP Addresses
      • Rate Control
    • Auto Whitelist
    • Containment System
    • Data Leak Prevention (DLP)
    • Attachment Verdict System
  • Profile Management
    • Add And Configure A New Profile
      • Edit A Profile
      • Delete A Profile
  • Reports
    • Mail Logs Report
    • SMTP Queue Report
    • Delivery Logs Report
    • SMTP-AUTH Logs Report
    • Summary Reports
    • Domain Reports
    • Attachment Verdict Reports
    • Original Mail Requests
  • Quarantine & Archive
    • Quarantine & Archive Settings
      • Quarantine & Archive General Settings
      • Email Reports Settings
      • Admin Email Reports Settings
    • Quarantine Logs
    • Archived Mails
  • Appendix - KoruMail Versions
  • About Comodo Security Solutions

Add and Configure a New Profile


Profiles let you configure how Korumail's scanners and filters should handle mail on your protected domains. The items that can be set in a profile include Anti-virus, Anti-spam, SMTP, Attachment Filter, Black List, White List, Header Filter, Archive and Quarantine, Data Leak Prevention (DLP) and Realtime Blackhole List (RBL).

    • Click 'Profiles' > 'Add profile'




      The 'Add New Profile' screen will be displayed:




      Profiles - Table of Parameters

      Parameter

      Description

      Profile Type

      Select whether you want the profile to apply to incoming mails or outgoing mails.

      Profile Name

      Enter a name for the profile.

      Description

      Provide an appropriate description for the profile.

      Username

      Select the username of the person who is adding the profile. Only users with appropriate privileges will be listed.

      Domain Members

      Allows administrators with appropriate privileges to add domains for the profile. The box in the left side displays the domains that were added in the 'Managed Domains' section. Any domain that is already added to a profile will not be listed. Domains can be added by selecting and clicking the appropriate button (Copy all, Copy, Remove, Remove all) in the middle. All the users in a domain added here will be applied the profile.

      Email Members

      Allows administrators with appropriate privileges to add users for the profile who may belong to other domains that are not added for a profile. Please note that for an incoming profile only users belonging to domains added in the 'Managed Domains' section can be added here. For an outgoing profile, you can also add users belonging to domains that are not added in the 'Managed Domains' section.

      Import

      Allows administrators to add users for the profile by importing them from a saved file. For importing users for an incoming profile the same limitations mentioned in the above row will apply.


        • Click 'Save' to apply your changes.

          The profile will be saved and the tabs for configuring other parameters will be enabled displayed.




          The interface allows administrators to configure profile parameters for:

          • Anti-virus
          • Anti-spam
          • Black List
          • White List
          • SMTP Settings
          • Attachment Filter
          • Header Filter
          • Archive and Quarantine
          • Rules
          • Email Classification
          • Geolocation Restrictions
            • Realtime Blackhole List (RBL)
            • Data Leak Prevention (DLP)
            • Containment System
            • Attachment Verdict System

            Note: All tabs are disabled until you complete and save the details of the domain members.


            Anti-virus 

            • Click 'Profile Management' > 'Profiles'
            • Locate the profile you want to work on and click the 'Edit' button on the right
            • Click the 'Anti-virus' tab 



               
            • Enable Anti Virus: Select the check box to enable the anti-virus engine for this profile. Please note the 'Anti-virus' module should be enabled for this parameter to become active. 
            • Quarantine mails containing virus: Mails detected with viruses will be quarantined. Users can log into the 'Quarantine Webmail' interface to view his/her mails that are quarantined. 
            • Click 'Save' to apply your changes.


            Anti-spam  

            • Click 'Profile Management' > 'Profiles'
            • Locate the profile you want to work on and click the 'Edit' button on the right
            • Click the 'Anti-spam' tab 


             

            Profiles: Anti-spam Settings - Table of Parameters

            Parameter

            Description

            Enable Anti SPAM

            Select the check box to enable the anti-spam engine for this profile. Please note the 'Anti-spam' module should be enabled for this parameter to become active.

            Use a dedicated bayesian database for this profile

            Select the check box to enable the anti-spam engine to use Bayesian database also for detecting spam mails. Please note the 'Bayes Spam engine' in the 'Advanced Settings' section of 'Anti-spam' module should be enabled for this parameter to become active.

            Maximum MB that an e-mail enters spam filtering

            Enter the maximum size of emails for which spam filtering will be enabled. If the size of an email exceeds the entered value, then the email will not be scanned and placed in queue for delivery to the recipient.

            Certainly spam points

            Enter a value between 1 and 100 that will classify an email as definitely spam. Suggested values are between 90 - 100 points.

            Spam points

            Enter a value between 1 and 100 that will classify an email as spam. Suggested values are between 51 – 89 points.

            Probable spam points

            Enter a value between 1 and 100 that will classify an email as probable spam. Suggested values are between 40 – 50 points.

            Certainly spam action

            Select the action that has to be taken for emails that are categorized as definitely spam. The options available are:

            • Tag – The email will be sent to the recipient with a tag as entered in the next field 'Certainly spam tag'
            • Forward – The mail will be forwarded to a mail box defined in the 'Spam mailbox' field
            • CC – The mail will be sent to the recipient and a copy will be sent to a mail box defined in the 'Spam mailbox' field
            • Discard – The mail will be quarantined. Daily notifications will be sent to user with details of quarantined emails. The user can view the email using the 'Quarantined Email' web interface.
            • Reject – The mail will be rejected and a reject command will be sent to the sender mail server.

            Certainly spam tag

            Enter the tag text for emails that are categorized as definitely spam

            Spam Action

            Select the action that has to be taken for emails that are categorized as spam. The options available are: 

            • Tag – The email will be sent to the recipient with a tag as entered in the next field 'Spam tag'
            • Forward – The mail will be forwarded to a mail box defined in the 'Spam mailbox' field
            • CC – The mail will be sent to the recipient and a copy will be sent to a mail box defined in the 'Spam mailbox' field
            • Discard – The mail will be quarantined. Daily notifications will be sent to user with details of quarantined emails. The user can view the email using the 'Quarantined Email' web interface.
            • Reject – The mail will be rejected and a reject command will be sent to the sender mail server.

            Spam tag

            Enter the tag text for emails that are categorized as spam.

            Probable spam action

            Select the action that has to be taken for emails that are categorized as probable spam. The options available are:

            • Tag - The email will be sent to the recipient with a tag as entered in the next field 'Probable spam tag'
            • Forward - The mail will be forwarded to a mail box defined in the 'Spam mailbox' field
            • CC - The mail will be sent to the recipient and a copy will be sent to a mail box defined in the 'Spam mailbox' field
            • Discard - The mail will be quarantined. Daily notifications will be sent to user with details of quarantined emails. The user can view the email using the 'Quarantined Email' web interface.
            • Reject - The mail will be rejected and a reject command will be sent to the sender mail server.

            Probable spam tag

            Enter the tag text for emails that are categorized as probable spam.

            Spam mailbox

            Enter the email address to which the forwarded and CCed spam emails configured in the 'Spam action' drop-down will be sent.

            Quarantine mails matching policies

            If enabled, emails that are matching the configured profile will be quarantined.

            Quarantine Certainly SPAM Mails

            If enabled, emails that are categorized as definitely spam will be quarantined.

            Quarantine SPAM Mails

            If enabled, emails that are categorized as spam will be quarantined.

            Quarantine Probable SPAM Mails

            If enabled, emails that are categorized as probable spam will be quarantined.


            • Click the 'Save' button to apply your changes.


              Black List 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Black List' tab




              Profiles: Black List Settings – Table of Column Descriptions

              Column Header

              Description

              Blacklist Type

              Select the type of source that has to be blacklisted. The options available are:

              • IPv4 Address
              • IPv6 Address
              • E-mail
              • Domain
              • IPv4 Network
              • IPv6 Network

              Blacklist Value

              Enter the details for the type of blacklist selected in the first column.

              Comment

              Provide an appropriate description for the blacklisted source.

              Action


              Allows administrators to add a blacklist type after filling the fields in the row.


              Allows administrators to delete a blacklist type from the list.


              • To save the list of blacklisted sources, click the 'Export' link and save it to your system
              • To import a list of sources to be blacklisted, click the 'Import' link.




              • Click the 'Upload' button, browse to the location where the file is saved and click 'Open'.

              The file will be added.




              • Repeat the process to add more files.
              • To remove a file, click the 'Clear' link beside it.
              • To remove all the added files, click the 'Clear All' button at the top right.
              • To import the list from the files, click 'Save'.
              • To delete a blacklist type from the list, click under the 'Action' column header and click 'OK' in the confirmation screen.
              • To remove all the blacklisted sources, click the 'Delete all' link and click 'OK' in the confirmation screen.


              White List 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'White List' tab 




              Profiles: White List Settings – Table of Column Descriptions

              Column Header

              Description

              Whitelist Type

              Select the type of source that has to be whitelisted. The options available are:

              • IPv4 Address
              • IPv6 Address
              • E-mail
              • Domain
              • IPv4 Network
              • IPv6 Network

              Whitelist Value

              Enter the details for the type of whitelist selected in the first column.

              Comment

              Provide an appropriate description for the blacklisted source.

              Action


              Allows administrators to add a whitelist type after filling the fields in the row.



              Allows administrators to delete a whitelist type from the list.


              • To save the list of whitelisted sources, click the 'Export' link and save it to your system.
              • To import a list of sources to be whitelisted, click the 'Import' link




              • Repeat the process to add more files.
              • To remove a file, click the 'Clear' link beside it.
              • To remove all added files, click 'Clear All' button at the top right.
              • To import the list from files, click 'Save'.
              • To delete a whitelist type from the list, click under the 'Action' column header and click 'OK' in the confirmation screen.
              • To remove all the whitelisted sources, click the 'Delete all' link and click 'OK' in the confirmation screen.


              SMTP Settings 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'SMTP Settings' tab




              Profiles: SMTP Settings - Table of Parameters

              Parameter

              Description

              Refuse mails sent by fake local users

              If enabled, KoruMail checks the 'From' details of an outgoing message with that of the added users and rejects if the users' details are not available.

              Require valid reverse DNS record

              If enabled, the added domains should have a valid reverse DNS record for the mails to be processed and delivered

              Enable KoruMail Reputation Network® Blacklist Scan

              If enabled, mails are scanned for blacklist sources listed in the KoruMail Reputation Network® (KRN) servers. Please note the KRN server setting should be enabled in the KRN module.

              Enable KoruMail Reputation Network® whitelist Scan

              If enabled, mails are scanned for whitelist sources listed in the KoruMail Reputation Network® (KRN) servers. Please note the KRN server setting should be enabled in the KRN module.

              Enable validation of MX records for incoming connections

              MX records maintain the entries of email server details to which the received emails for the protected domains are sent. If this check box is enabled, MX records for the protected will be checked and validated.

              Enable greylisting

              If enabled, KoruMail creates a Greylist of source IP address/domains from where emails are sent to recipients protected by its filtering engine. Mails received from a source for the first time is rejected by KoruMail and sends a command to the source to resend the email. Generally, spammers do not resend emails. If the email is sent again from the source again, KoruMail accepts the mail and initiates the filtering process.

              Activate Layer-7 DoS protection

              If enabled, KoruMail will activate the Layer 7 Denial of Service protection feature.

              Quarantine RBL-KRN Mails

              If enabled, both RBL and KRN mails mails will be Quarantined.

               Quarantine Antispoofing Mails  If enabled, the spoofing mails will be Quarantined.

              Anti-spoofing Action

              Select the action to be performed when the condition is met for a mail. The options available are:


              Reject - The mail will be rejected and a reject response will be sent to the sender's mail server.


              Discard – The mail will be rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.

              KRN Action

              Select the action to be performed when the condition is met for a mail. The options available are:


              Reject - The mail will be rejected and a reject response will be sent to the sender's mail server.


              Discard – The mail will be rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.

              RBL Action

              Select the action to be performed when the condition is met for a mail. The options available are:


              Reject - The mail will be rejected and a reject response will be sent to the sender's mail server.


              Discard – The mail will be rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.


              • Click 'Save' to apply your changes.


              Attachment Filter 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Attachment Filter' tab 




              Profiles: Attachment Filter Settings – Table of Column Descriptions

              Column Header

              Description

              Addition

              Enter the keyword that should be scanned for the attachments.

              Condition

              Select the condition from the drop-down. The options available are:

              • Contains
              • Equals to
              • Starts with
              • Ends with

              Action

              Select the action to be performed when the condition is met for an attachment in a mail. The options available are:

              • Reject – The mail will be rejected and a reject response will be sent to the sender's mail server.
              • Discard – The mail will be quarantined. Daily notifications will be sent to user with details of quarantined emails. The user can view the email using the Quarantined Email web interface.
              • Remove attachment – The mail will be delivered to the recipient without the attachment.



              Allows administrators to add an attachment filter rule after filling the fields in the row.


              Allows administrators to delete attachment filter rule from the list.


              • To save the list of 'Attachment Filter' rules, click the 'Export' link and save it to your system
              • To import a list of 'Attachment Filter' rules from a saved file, click the 'Import' link.




              • Click the 'Upload' button, browse to the location where the file is saved and click 'Open'.

              The file will be added.




              • Repeat the process to add more files.
              • To remove a file, click the 'Clear' link beside it.
              • To remove all the added files, click 'Clear All' at the top right.
              • To import the list from the files, click 'Save'.
              • To delete an 'Attachment Filter' rule from the list, click the  button under the last column and click 'OK' in the confirmation screen.
              • To remove all the 'Attachment Filter' rules, click the 'Delete all' link and click 'OK' in the confirmation screen.


              Header Filter 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Header Filter' tab 




              Profiles: Header Filter Settings – Table of Column Descriptions

              Column Header

              Description

              Header

              Select the header type that you want to add a 'Header Filter' rule for. The choices available are:

              • Subject
              • Received
              • To
              • From

              Value

              Enter the keyword that should be scanned for the selected header type.

              Type

              Select the condition from the drop-down. The options available are:

              • Contains
              • Equals to
              • Starts with
              • Ends with

              Action

              Select the action to be performed when the condition is met for a 'Header Filter' rule in a mail. The options available are:

              • Reject – The mail will be rejected and a reject command will be sent to the sender's mail server.
              • Discard – The mail will be quarantined. Daily notifications will be sent to user with details of quarantined emails. The user can view the email using the 'Quarantined Email' web interface.

              Action


              Allows administrators to add a 'Header Filter' rule after filling the fields in the row.


              Allows administrators to delete a 'Header Filter' rule from the list.


              • To save the list of 'Header Filter' rules, click the 'Export' link and save it to your system
              • To import a list of 'Header Filter' rules from a saved file, click the 'Import' link.




              • Click the 'Upload' button, browse to the location where the file is saved and click 'Open'.

              The file will be added.




              • Repeat the process to add more files.
              • To remove a file, click the 'Clear' link beside it.
              • To remove all the added files, click 'Clear All' at the top right.
              • To import the list from the files, click 'Save'.
              • To delete a 'Header Filter' rule from the list, click the  button under the last column and click 'OK' in the confirmation screen.
              • To remove all the 'Header Filter' rules, click the 'Delete all' link and click 'OK' in the confirmation screen.


              Archive and Quarantine

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Archive and Quarantine' tab



              Profiles: Archive and Quarantine Settings - Table of Parameters

              Parameter

              Description

              Archive method

              Select how the mails should be archived from the drop-down. The options available are:

              • None – The mails are not archived
              • Forward – The mails are forwarded to the mail address entered in the next row 'Archive mailbox'
              • Disk – The mails are stored in local disk
              • Disk + Forward – The mails are stored in local disk and a copy is forwarded to the mail address entered in the next row 'Archive mailbox'

              Please note the archived and quarantined mails are removed from the disk as per the configuration done in the 'Quarantine & Archive Settings' interface.

              Archive mailbox

              This field becomes active only when an archive method is selected in the first row. Enter the mail address to which the archived and quarantined mails will be sent.

              Send daily quarantine report to recipients

              If enabled, the users will receive daily reports of their quarantined mails. Users can view their quarantined mails in the 'KoruMail Quarantine Webmail' interface by clicking the 'Quarantine Webmail' link in the 'Login' screen.

               

              Quarantine Release Operation

               

              Allows users to release their mails from quarantine.

              Archive Flags

              Mails with CLEAN content

              If enabled, mails that are categorized as safe will be archived as per the 'Archive method' setting done in the first row.

              Mails with CERTAINLY SPAM content

              If enabled, mails that are categorized as 'Certainly Spam' will be archived as per the 'Archive method' setting done in the first row.

              Mails with SPAM content

              If enabled, mails that are categorized as 'Spam' will be archived as per the 'Archive method' setting done in the first row.

              Mails with PROBABLE SPAM content

              If enabled, mails that are categorized as 'Probable Spam' will be archived as per the 'Archive method' setting done in the first row.

              Mails matched by CONTENT FILTER rules

              If enabled, mails that are filtered for content per the settings done in 'Content Filter' in the 'Anti-spam' module will be archived as per the 'Archive method' setting done in the first row.

              Mails containing VIRUS

              If enabled, mails that are categorized are with virus will be archived as per the 'Archive method' setting done in the first row.


              • Click 'Save' to apply your changes.


              Rules 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Rules' tab 




              Rules Settings – Table of Parameters

              Parameters

              Description

              PROMO
               Promotion Tag Promotional emails are sent to the recipient with the tag as entered in this field.
              Promotional Action
              Select the action when the condition is met for a 'Rules' setting in a promotional mail. The options available are:
              • OK + TAG – The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag.
              • Reject - The mail is rejected and a reject response will be sent to the sender mail server.
              • Discard - The mail is rejected without notifying the sender.  The user can view the email using the 'Quarantined Email' web interface.
              Quarantine Promotional Mails
              If enabled, promotional mails are quarantined.
               SOCIAL 
              Social Action
              Select the action when the condition is met for a 'Rules' setting in a social mail. The options available are:
              • OK + TAG – The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag.
              • Reject – The mail is rejected and a reject response will be sent to the sender mail server.
              • Discard – The mail is quarantined. The user can view the email using the 'Quarantined Email' web interface.
               Social Tag  Phishing emails are sent to the recipient with the a tag as entered in this field.
               FORUM

              Forum Action

              Select the action when the condition is met for a 'Rules' setting in a forum mail. The options available are:

              • OK + TAG - The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag
              • Reject - The mail is rejected and a reject response will be sent to the sender mail server.
              • Discard - The mail is rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.

              Forum Tag

              Forum based emails are sent to the recipient with the a tag as entered in this field.

              Quarantine forum mails

              If enabled, forum mails are quarantined.

               NEWSLETTER 
              Newsletter Action

              Select the action when the condition is met for a 'Rules' setting in a newsletter mail. The options available are:

              • OK + TAG - The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag.
              • Reject - The mail is rejected and a reject response will be sent to the sender mail server.
              • Discard - The mail is rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.

              Newsletter Tag

              Newsletter emails are sent to the recipient with the tag as entered in this field.

              Quarantine social mails

              If enabled, social mails are quarantined.

               UPDATE

              Update Action

              Select the action when the condition is met for a 'Rules' setting in a update mail. The options available are:

              • OK + TAG - The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag.
              • Reject - The mail is rejected and a reject response will be sent to the sender mail server.
              • Discard - The mail is rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.

              Update Tag

              Update emails are sent to the recipient with the a tag as entered in this field.

              Quarantine update mails

              If enabled, update mails are quarantined.

               FISHING 

              Enable Phishing Check

              If enabled, checks for phishing emails.

               Phishing Action  Select the action when the condition is met for a 'Rules' setting in a phishing mail. The options available are:
              • OK + TAG - The tagged mail is sent to the recipient.
              • OK – The mail is sent to the recipient without tag
              • Reject - The mail is rejected and a reject response is sent to the sender mail server.
              • Discard - The mail is rejected without notifying the sender.  The user can view the email using the 'Quarantined Email' web interface.
               Phishing Tag
               Phishing emails are sent to the recipient with the a tag as entered in this field.

              Quarantine newsletter mails

              If enabled, newsletter mails are quarantined


              • Click 'Save' to apply your changes.


              Email Classification

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Email Classification' tab



              Email Classification Settings - Table of Parameters

              Parameter

              Description

               Category

               The type of mail received.

              Status

               Whether the rule is enabled or not.

               

              Tag

               

              The name prefixed to the email to show the email classification. For example, promotional email subjects are prefixed with [PROMO].

               

              Action

               

              Select the action to be performed when the condition is met for a 'Rules' setting in a forum mail. The options available are:

              • Discard - The mail will be rejected without notifying the sender. The user can view the email using the 'Quarantined Email' web interface.
              • TAG Only – The tagged mail will be sent to the recipient.
              • Reject - The mail will be rejected and a reject response will be sent to the sender mail server.
              • OK – The mail will be sent to the recipient without tag.
               

              Quarantine

               

              If enabled, the corresponding category of mails will be quarantined.

               

              • Click 'Save' to apply your changes.

              Geolocation Restrictions 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Geolocation Restrictions' tab 



              Profiles: Geolocation Restrictions Settings - Table of Column Descriptions

              Column Header

              Description

              Rejected Countries

              Select the country you want Korumail to reject. Please note that you have to enable SMTP > General settings.

              Action


              Allows administrators to add a country after selecting it in the row.


              Allows administrators to delete the country from the list.


              Realtime Blackhole List (RBL) 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'RBL' tab 




              The screen displays the RBL servers that are available by default and added manually. See 'Manage RBL Servers' for more details.


              RBL Servers – Table of Column Descriptions

              Column Header

              Description

              Server Host Address

              The address of the RBL server.

              Description

              The description provided at the time of adding the RBL server.

              Type

              The type of block list selected.

              Enable

              Allows administrators to activate or deactivate a RBL server in the list. If a server is disabled, KoruMail skips it and refers to the next server in the line.


              The control buttons next to the table allows to reorder the RBL server list for checking the blacklisted IP addresses available in the servers. The enabled RBL server listed first will be checked first and move down the order. Use the control buttons to move a server up or down the order.




              Data Leak Prevention (DLP)


              The DLP feature is capable of scanning mails for important key words such as credit card, social security numbers, attachments and takes action as per the settings. Please note that the DLP module should be enabled for the settings configured here to take effect. See 'Data Leak Prevention' for more details. 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'DLP' tab


              DLP General Settings



              DLP Action - These settings determine what action should be taken if KoruMail detects a message that could present a data leak.

              The options available are:

              • No Action - The mail will be allowed and the system admin will be notified if 'DLP Notify' is enabled.
              • Reject - The mail will be rejected and a reject warning will be sent to the sender's email address.
              • Discard - The mail will be deleted and if 'DLP Quarantine' is enabled, it will be quarantined and the system admin will be notified.
              • Enable DLP Quarantine – If selected, KoruMail quarantines mails with data leak. Please note the setting in 'DLP Action' should be 'Discard' for mails to be quarantined.
              • Enable DLP Notify – If selected, KoruMail alerts the system admin about DLP breaches.

              DLP Quarantine

              • Click the 'DLP Quarantine' tab
              • Select the check box beside 'Enable DLP Quarantine' to quarantine mails with data leak. Please note the setting in 'DLP Action' should be 'Discard' for mails to quarantined.
               

              DLP Notify

              • Click the 'DLP Notify' tab
              • Enable DLP Notify – Select the check box to keep the system admin informed about DLP breaches. 


              Attachment List

              • Click the 'Attachment List' tab




              • Enable Attachment List – Select the check box to block emails with attachment file class defined below in the table.
              • Scan Archive Files – Select the check box to scan the attached zip files and block emails with attachment file class defined below in the table.


              Add a file class

              • Select the file class from the 'Choose File Class' drop-down




              The file types for the selected file class will be displayed on the right side table.

              • Select the file type or the check box above to select all the file types and click the 'Add' button beside it.

              The added file types for the selected file class will be displayed in the table below the first table.



              • Clicking the link beside a file type under the 'Status' column header toggles the status between 'Active' and 'Passive'. 'Active' status indicates emails with attached file type will be blocked.
              • To delete a file type from the list, select it and click the 'Delete' button. To delete all file types, select the check box beside 'File Class Name' column header and click the 'Delete button.

              DLP Body Filter


              The 'DLP Body Filter' feature searches the content of an email for sensitive information such as credit card details, email address and so on and take action as per the settings done in 'DLP Action'. KoruMail comes with three predefined DLP Body Filters and allows the administrators to add more filters as required.

              • Enable DLP Body Filter: Select the check box to apply the configured body filters


              Profiles: DLP Body Filter Settings – Table of Column Descriptions

              Column Header

              Description

              Status

              Select the check box to enable the filter.

              Enable DLP Body Filter

              The name of the filter.

              Action



              Allows to view the details of the body filter.



              Allows to edit a body filter.



              Allows to delete a body filter.


              Add a new DLP body filter

              • Click the 'Add' button at the top of the table




              The filter 'Pattern' screen will be displayed.



              • Pattern Name: Enter the name of the filter pattern
              • Regular Expression: Enter the regular expression to define the search pattern. To know more about Regular Expression, see Wikipedia at http://en.wikipedia.org/wiki/Regular_expression. You can also enter keywords in the field to search and block the email containing it.

              View the details of a pattern

              • Click the  icon beside a body filter that you want to view the details




              • Click the 'Cancel' button or close the dialog to return to main screen.

              Edit a body filter

              • Click the  icon beside a body filter that you want to edit the details




              • Edit the details as required and click the 'Save' button

              Delete a body filter

              • Click the  icon beside a body filter that you want to delete




              • Click 'OK' to confirm the deletion.

              Containment System 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Containment System' tab 




              Containment System - Table of Column Headers

              Column Header

              Description

              Enable Containment System

              If enabled, email attachments (pdfs and windows executables) will be 'wrapped' with containment code before delivery. This means they will open in an isolated, virtual environment known as the container, instead of directly on the endpoint. The attachment will open as normal from the end-user's point-of-view, but it will not be allowed to access important system files, user data or to cause damage to the host system.

              Files which are accepted

              If enabled, will deliver files in the chosen format.

              Apply for whitelists

              If enabled, KoruMail will also analyze white-listed sources.

              Only Administrator can unwrap

              Safe files in the containment when run are unwrapped immediately for both users and admins. Malicious files are blocked.


              Contained files for which results are unsure (not safe nor malicious) are unwrapped if specified time or count (mentioned in rows below) is reached.


              If this setting is:

              • Enabled - Only admins can unwrap contained files for which results are unsure (not safe nor malicious)
              • Disabled – Both admins and users can unwrap contained files for which results are unsure (not safe nor malicious)

              Unwrap the sandbox after specified time (mins)

              Unsure files (not safe nor malicious) when run are moved out of containment after the specified time. Move the slider to set the time.

              Unwrap the sandbox after specified running count

              Unsure files (not safe nor malicious) when opened ‘X’ times as specified here are moved out of containment. Move the slider to set the count.


              Attachment Verdict System 

              • Click 'Profile Management' > 'Profiles'
              • Locate the profile you want to work on and click the 'Edit' button on the right
              • Click the 'Attachment Verdict System' tab 



              Profile: Attachment Verdict System - Table of Column Headers

              Column Header

              Description

              Enable Attachment Verdict System

              • If enabled, Korumail will automatically check the trust rating of Windows executables and pdf files in Comodo's file look up server (FLS).
              • The verdict from the FLS can be ‘Clean’, ‘Malware’ or ‘Unknown’.
              • Clean attachments will be allowed to proceed while malware attachments will be automatically quarantined (providing ‘Quarantine mails containing viruses’ is enabled in the antivirus section of the profile).
              • ‘Unknown’ files will be submitted to Comodo’s real-time file analysis system, Valkyrie, for behavior testing.
              • Valkyrie’s tests will determine whether the unknown file is clean or malware and apply the appropriate action as mentioned above.

              Malware Probability Value

              • The threshold at which Korumail will designate an unknown file as 'malware' based on Valkyrie results.
              • Comodo recommend that administrators leave this setting at the default and only move it after consultation with Comodo support.
              • Valkyrie examines the behavior of unknown files and assigns a score indicating how likely it is that the file is malware.
              • Under the default settings, a score of 46+ is classed as malware.
              • Raising the value in this slider means KoruMail is more tolerant/less likely to class attachments as malware.

              Apply for whitelists

              When enabled, Korumail sandboxes clean mails as well.

              Send files that not found in File Verdict System

              If enabled, Korumail will upload files rated 'Unknown', to the attachment verdict system for detailed behavior analysis.

              Auto-submission in queue waiting time

              Define in seconds how long Korumail should wait before the submission times-out.


              Our Products
              • Free Antivirus
              • Free Internet Security
              • Website Malware Removal
              • Free Anti-Malware
              • Anti-Spam (Free Trial)
              • Windows Antivirus
              • Antivirus for Windows 7
              • Antivirus for Windows 8
              • Antivirus for Windows 10
              • Antivirus for MAC
              • Antivirus for Linux
              • Free Endpoint Security
              • Free ModSecurity
              • Free RMM
              • Free Website Malware Scanner
              • Free Device Manager for Android
              • Free Demo
              • Network Security
              • Endpoint Protection
              • Antivirus for Android
              • Comodo Antivirus
              • Wordpress Security
              Cheap CDN
              • Bootstrap CDN
              • Semantic UI CDN
              • Jquery CDN
              • CDN Plans
              • CDN
              • Free CDN
              Enterprise
              • Patch Management Software
              • Patch Manager
              • Service Desk
              • Website Down
              • Endpoint Protection Solutions
              • Website Security Check
              • Remote Monitoring and Management
              • Website Security
              • Device Manager
              • ITSM
              • CRM
              • MSP
              • Android Device Manager
              • MDR Services
              • Managed IT Support Services
              • Free EDR
              Free SSL Certificate
              Support Partners Terms and Conditions Privacy Policy

              © Comodo Group, Inc. 2025. All rights reserved.