Skip to main content

Sender exclusions for Outbound Burst Detection

Email Security

Introduce a configurable sender-level exclusion list for Outbound Burst Detection, allowing administrators to exclude specific trusted mailboxes without increasing global detection thresholds or disabling protection for other users.

Posted by Sterling Intaj ·
Status: Under Consideration1 comment

Log in to comment and vote

Comments1

  • Matt Sywulak

    Team•

    Oct 20

    You can set this up today with the burst detection rule's conditions. In Settings → Outbound Protection, under Burst Detection Settings, open Additional Conditions (optional). Add a From Email Address condition (under Headers) with the trusted mailboxes as its values, then negate it. Those senders no longer enter burst mode, and the thresholds and everyone else's detection stay as they are. To exclude a whole directory group, use Mail Group under Sender instead.

    Put all the addresses in one condition. A user who is already in burst mode stays there until the burst ends or you remove them on the Burst Management tab.