Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=email-data-control-rule-actions

Actions

Select the actions to take when the rule is matched, who to notify, and additional options.

Note

The available actions vary depending on the rule type and direction, either Inbound or Outbound.

For example, if you select Inbound, the Bounce action doesn't appear in the list of actions. For outbound rules, you can override the default encryption method set in your Secure Message policy.

You can select from the following actions:

  • Quarantine: Sophos Email quarantines the message for review.
  • Encrypt: Sophos Email encrypts the message to secure it. By default, the encryption method specified in the user's Secure Message policy is applied. You can override this by selecting a different encryption method in the rule. However, you should have a Secure Message policy for the user so that other default settings from that policy, such as the language of registration messages, can be applied.
  • Strip attachments: The original message is quarantined, and a copy is delivered to the recipient without the attachment. You can manage the attachments from Quarantined Messages. See Quarantined Messages.

  • Modify Address: You can specify the To, CC, or BCC recipients of the message.

    Note

    • If you only specify CC or BCC recipients, then the rule will send the message to the original recipients and the addresses you specified in CC and BCC.
    • If you specify the To recipient, then the rule will send the message to the specified addresses instead of sending it to the original recipient.
    • If you select Envelope only, then the MIME headers aren’t modified, and the message is sent only to the specified To address.

  • Redirect message: The original message is forwarded as an attachment to the redirection email address.

  • Reroute message: You can add the IP address or FQDN (Fully Qualified Domain Name), and port number, of a destination you want to route messages to.

    Note

    The rerouting action only applies to messages received and delivered by Sophos Email Gateway. For Sophos Email Mailflow messages, you must configure routing in Microsoft 365.

  • Bounce: Sophos Email notifies the sender that it couldn't deliver the message.

  • Modify Header: Select one of the following actions:

    • Add header: Enter a header element and a value. The header element is added to the email.
    • Edit header value: Enter a header and a value. The value of the first entry of the header is replaced with the new value.
    • Strip header: Enter a header element. All headers matching the header element are removed.

  • Delete: Sophos Email deletes the message.

  • Log: Sophos Email records data control policy violations without taking further action.
  • Tag a subject line: You can add a subject line to the message subject.
  • Notify recipients: You can send notifications to the recipients.
  • Notify administrators: You must select the email address of an administrator to notify. If you delete the mailbox later, Sophos Email continues to send notifications to it. You must change the address, or select a different action.