The journal reports are sent to the Journal mailbox for archiving. In the example journal rule above, all messages sent to or from User01 will be journaled. Journal rules are policies for intercepting and archiving messages to and from regulated users (or sets of users) the journal rule configuration allows one define the target user(s) and scope to global, internal, or external messages. Similar to the Transport Rules agent, the Journaling agent also runs on Hub Transport servers (the Journaling agent runs after the Transport Rules agent), evaluating every message against the set of journal rules.
EXCHANGE 2010 JOURNALING ARCHIVE
These records are then delivered via SMTP to the archive for de-duplication / discovery and production. If an archive is required, then Exchange journaling can be used to create records of email communications, including BCC data, DL membership at the time of delivery, etc. The journaling feature was developed to meet the needs of enterprise class message archiving, often driven by legal and regulatory requirements, such as the Sarbanes Oxley Act, SEC Rule 17A-4, and other similar regulations. Spotlight on Exchange 2010: E-mail Moderation.Exchange Server 2007 Transport Rules Editor GUI.Transport Rules documentaton on TechNet.For additional details on Transport Rules see: One can create very specific rules to intercept messages based on recipients, senders, message content, and/or message properties. The advantage that Transport Rules presents is the rich set of conditions & exceptions to which one can scope the rule.
![exchange 2010 journaling exchange 2010 journaling](https://www.websense.com/content/support/library/email/shared/exchjour_2010/images/db_mgnt_tab.png)
The manager gets an approval request message for the intercepted message, and has the ability to approve or reject the message (via Outlook or OWA). In the example rule above, members of the "Contractors" group are working on a sensitive project and corporate policy dictates that messages sent outside of the organization must be first approved by the user's manager before being delivered.
EXCHANGE 2010 JOURNALING HOW TO
An example of how to configure a Transport Rule for moderation, using the Exchange Management Console (EMC): If your goal in message interception is to have a supervisor review and approve the message before delivery, then you may want to use the moderation action (new in Exchange 2010).
![exchange 2010 journaling exchange 2010 journaling](https://manuals.gfi.com/en/mar12admin/content/administrator/images/mailbox_database_e2k10.png)
EXCHANGE 2010 JOURNALING CODE
Sent to users that are 'Outside the organization'Īnd when the Subject field or message body contains 'Secret project code words'īlind carbon copy(Bcc) the message to when the message is sent to a member of this rule, external bound messages containing sensitive project key words are copied to a mailbox, where they will be reviewed periodically for policy violations, except for messages which are addressed to members of the trusted partner group. If your goal is to clandestinely copy certain messages to a supervisory mailbox for post-send review, one could use the "Blind carbon copy (Bcc)" action. The Transport Rules agent runs on the Exchange Hub Transport server, evaluating every message against the set of Transport Rules. Transport Rules are used to enforce message control and protection policies. If messages meet particular criteria (conditions and exceptions), then an action can be applied like 'block,' 'copy,' 'moderate,' or 'append a disclaimer to the message'. Transport Rule = Condition + Action + Exceptionįirst, a criteria is evaluated such as who the sender or receiver of the message is, or the keywords in a message. Transport rules are applied when messages are sent or received in your organization.
![exchange 2010 journaling exchange 2010 journaling](http://lyncdude.com/nethop.files.wordpress.com/2012/07/114.png)
Transport Rules-based message interception For a broader understanding of these two Exchange features, please reference the links provided below. The purpose of this article is to contrast these features' capabilities of message interception, and to help you identify which will best meet your particular compliance and control requirements. Transport Rules can be employed to satisfy needs for message review and monitoring, while Journaling can be employed to meet the regulatory compliance needs for message archiving. When looking for Exchange controls to copy messages for regulatory compliance needs, you may have come across both Transport Rules and Journaling and wondered, "Which one best serves the needs of my organization?"īoth features have the capability to intercept and copy messages to another mailbox, but they differ in how they intercept messages and in what details are included in the copied message.