Add APT info to SMTP email header
Looking at email headers, it would be nice to see some attributes from the WatchGuard APT submission, such as: date/time of WatchGuard receiving the email, date/time submitted, date/time results received, result of APT.
I'm investigating email delays and this would make it a lot easier than trying to get the information out of the logs.
0
Sign In to comment.
Comments
Hi @CraigS
The issue with this is by default the message is released before APT scanning is finished, so it's often impossible to add this information after.
Additionally, since the firewall is not storing the message, and rather streaming it in, the headers are often transmitted before the body (and attachments.)
-James Carson
WatchGuard Customer Support