Add APT info to SMTP email header

Looking at email headers, it would be nice to see some attributes from the WatchGuard APT submission, such as: date/time of WatchGuard receiving the email, date/time submitted, date/time results received, result of APT.

I'm investigating email delays and this would make it a lot easier than trying to get the information out of the logs.

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @CraigS

    The issue with this is by default the message is released before APT scanning is finished, so it's often impossible to add this information after.

    Additionally, since the firewall is not storing the message, and rather streaming it in, the headers are often transmitted before the body (and attachments.)

    -James Carson
    WatchGuard Customer Support

Sign In to comment.