Enterprise Vault™ Setting up SMTP Archiving

Last Published:
Product(s): Enterprise Vault (12.3)
  1. About this guide
    1.  
      Introducing this guide
    2. Where to get more information about Enterprise Vault
      1.  
        Enterprise Vault training modules
  2. Introducing Enterprise Vault SMTP Archiving
    1. About Enterprise Vault SMTP Archiving
      1.  
        SMTP Archiving configurations
      2.  
        SMTP Archiving components
    2.  
      About SMTP Journaling
    3.  
      About SMTP Group Journaling
    4.  
      About SMTP Mailbox Journaling
    5.  
      About SMTP Archiving licensing
    6.  
      Journaling messages to Enterprise Vault from Exchange Server or Office 365
  3. Installing SMTP Archiving
    1.  
      About installing Enterprise Vault SMTP Archiving components
    2.  
      Reporting
    3.  
      Monitoring
  4. Configuring SMTP Archiving
    1.  
      Steps to configure SMTP Archiving
    2.  
      Planning your configuration
    3. Configuring the Enterprise Vault SMTP Servers in the site
      1.  
        Entering the name or IP address of connecting hosts
      2.  
        Obtaining an SSL/TLS certificate
      3.  
        Configuring message tracking for SMTP messages
    4. Adding an SMTP Archiving task and holding folder
      1.  
        About the SMTP holding folder
      2.  
        Keeping safety copies of archived messages
      3.  
        Task summary reports
    5. Configuring retention categories and retention plans
      1.  
        Managing cascading retention settings on multiple archives
      2.  
        About changing retention on SMTP Group Journaling provisioning groups
    6. Creating SMTP policies
      1. About X-Headers
        1.  
          About X-Kvs X-Headers
        2.  
          Searching archives for messages with specific X-Headers
    7. Configuring archives for SMTP messages
      1.  
        Assigning multiple archives to spread the archiving load across servers
    8.  
      Adding SMTP routing addresses
    9.  
      Checking settings for SMTP Journaling
    10.  
      Additional configuration for Compliance Accelerator
  5. Provisioning users for SMTP Group or SMTP Mailbox Journaling
    1.  
      About SMTP provisioning groups
    2.  
      Adding an SMTP Group Journaling provisioning group
    3.  
      Adding an SMTP Mailbox Journaling provisioning group
    4.  
      Changing the order of the SMTP provisioning groups
    5.  
      Deleting an SMTP provisioning group
    6.  
      Adding or deleting an SMTP Provisioning task
    7.  
      SMTP Provisioning task summary reports
    8.  
      Configuring the SMTP site setting, Selective Journal Archiving
    9.  
      Adding SMTP target addresses manually
  6. Using the SMTP dashboard
    1.  
      About the SMTP dashboard
    2.  
      Using the Summary page
    3.  
      Using the Search page
    4.  
      Using the SMTP Archiving page
  7. PowerShell cmdlets
    1.  
      About the PowerShell cmdlets for SMTP Archiving
  8. Appendix A. Configuring target address rewriting
    1.  
      About target address rewriting
    2.  
      Steps to configure target address rewriting
    3.  
      Adding SMTP target addresses
    4.  
      Adding target address aliases

About SMTP Journaling

Figure: Example of SMTP Journaling

Example of SMTP Journaling

Typically within an organization, SMTP messages are delivered to user mailboxes by one or more MTAs. The MTAs are usually Exchange Servers, or SMTP servers. You configure these MTAs to journal or BCC a copy of each message to an Enterprise Vault SMTP routing address, for example, journal1@ev.example.com.

In Enterprise Vault, you configure the routing addresses as manual SMTP targets, and associate each target address with one or more archives. In the manual target properties, ensure that the target address is enabled for archiving. The check box, Archive messages sent from or received by this SMTP address, must be selected to enable a target address for archiving. When you add a new manual target, the check box is selected by default. Note that you cannot use SMTP Provisioning groups to add the routing addresses.

The Enterprise Vault SMTP server checks that the recipient address in an incoming message is an SMTP target, and adds this routing address to the message as an X-RCPT-TO header. The SMTP server then places the message as an .eml file in the SMTP holding folder.

The SMTP Archiving task then processes the message file in the holding folder. As you enabled the target address for archiving, the task stores the message in one of the archives associated with the target routing address. The archive types that you can use for journal archiving are SMTP, Shared, Exchange Journal, or Domino Journal archives. In archive types that contain folders, such as SMTP archives, the SMTP Archiving task stores all messages in the Inbox. Other journal archive types, such as Shared and Exchange Journal archives, do not contain folders. In these archives, the task stores all messages in the root of the archive.

In SMTP Journaling, the SMTP Archiving task only needs to examine the X-RCPT-TO field in each message in the holding folder. The advanced SMTP site setting, Selective Journal Archiving, configures the archiving task to search all of the sender and recipient fields (X-RCPT-TO, To, CC, BCC, From, Sender) in each message. If you are not using SMTP Journaling in combination with another type of SMTP archiving, this advanced site setting should be set to Non-selective, the default value. This optimizes performance.

Figure: Example of SMTP Journaling shows a simple environment with one Enterprise Vault SMTP server. (Production environments typically include several Enterprise Vault SMTP servers.) As there could be a large volume of messages for journaling, it is advisable to spread the archiving load over several Enterprise Vault storage servers. You can do this by creating several journal archives in different vault stores. A different Enterprise Vault storage service should manage each of the vault stores. If you use a single SMTP routing address, we recommend that you associate the routing address with multiple archives in different vault stores hosted on different Enterprise Vault storage servers. Enterprise Vault automatically performs load-balancing to spread the archiving load over several Enterprise Vault storage servers. Alternatively you can implement target address rewriting on the SMTP servers.

If the relay MTA is Exchange Server, you can create journal rules to select the appropriate routing address for the Enterprise Vault SMTP server.

See Journaling messages to Enterprise Vault from Exchange Server or Office 365.