Email journaling alternatives (to view all system emails)

[Witor]

Lo Chaps.

Question. In my place of work we currently use the Exchange 2007 journalling feature to keep a record of all emails entering/exiting our system. The point of it is to occasionally check the content of random emails for chain mails, excessive personal use, etc.

Now the Exhange 07 journal works pretty well, once we create rules for forwarded messages, folders for departments, removal of admin/system messages, etc.

Problem is the actual email is presented as an attachment, which basically means 2 clicks to view any email.

Does anyone use another system which can record all mails & send them to one account for inspection? (Must work with Exch.07)

cheers.

 

[Witor]

Essentially 3 people in the IT dept keep an eye on all emails via an additional mailbox.

Depending on the content/severity/number of mails, they are warned, then reported to HR for futher disciplinary crap.

 

[Witor]

That's a lot of wasted manpower used to spy on your employees.

Hardly

3 of them have the facility, no one person has the time to dedicate to it 100%. The person who would normally use it is not the most technically minded person, and she spends perhaps a total of an hour a day at most on it. 2nd person is relief (and when main viewer is away/busy). Third person maintains the journal, so to speak.

More importantly, the amount of spurious emails sent, email conversations back and forth between people, crap being forwarded and replied to, and legal implications of files being sent out to external recipients means its an absolute necessity to do this where I work. I wouldn't call it spying, simply down to the fact that one can use their brains and figure out what's legit by subject/size, time taken between replies, amount of replies, etc.

 

[Witor]

Thanks malman, will look into that mailarchiva software, looks useful.

iaind, already have websense for url/web browser filtering and a Sophos ES1000 for mail filtering. Browsing is not an issue really, it's the regular p*ss-take we see with quite a few employees using email as some sort of chat forum, for hours and hours a day, most days a week. There is a signed security policy all employees agree to with general rules. Much as it pains me to do it, its part of an instruction from higher management to refine the current process of detection.

Evidence of p*ss-taking must be presented, then an initial warning. Subsequent occasions, well thats their problem really.

As for Departmental managers/team leaders knowing what their employees are doing...I wish Having said that, this is a facility we would use in order to bring to their attention the odd cases where their fellow employees are being naughty.