Can we archive only official mail in enterprise vault for journaling?

[sandeepk]

Dear Team,

I have enabled exchange journal mail for archiving in enterprise vault 9.0 I know how to create policy but I want know how to create customs policy for journal archiving e.g

A lot of mail come in journal mail box that all mail are archiving by Enterprise vault (official and non official) so can we archive only official mail.

Thanks & Regards,

Sandeep kadlak

[JesusWept3 · Accepted solution]

How do you classify official mail?
Does the compliancy rules the company and lawyers allow for this?
Is there any chance you can use a mail gateway that does antispam so that (hopefully) only genuine mail hits the journal and user mailboxes?

You could look in to selective journaling i suppose
http://thingsilearnedtoday.net/2011/05/09/selective-journaling-with-enterprise-vault/

or custom filtering:
https://www-secure.symantec.com/connect/articles/custom-filtering-enterprise-vault

[AndrewB]

it sounds to me like Enterprise Vault Data Classification Services (DCS) would be a great fit for your needs. have a look here: https://www-secure.symantec.com/connect/videos/enterprise-vault-data-classification-services

and here: http://www.symantec.com/docs/DOC5473

[sandeepk]

 When we suggest customer to migrate on EV 10.0 most of the customer are hesitating as it require more manpower along with the cost overhead of Software and Hardware as EV 10 work completely on 64 bit.

[TonySterling]

So back to JW2's question:

How do you classify official mail?
Does the compliancy rules the company and lawyers allow for this?

It might be possible to use Custom Filtering to do what you want but without more details it is hard to say.

Regards,

[sandeepk]

If I saw in journaling mail box we found there is a lot of unwanted mails are coming from different ID

For example: Google alert, yahoo alert, Facebox alert, LinkedIn alerts this kind (Junk mail) of mail are come in journal mail box and thus mail are archive by Entries vault

It is not needs to archive (junk mail) thus mail in Enterprise vault. For this reason I want to solution  

[TonySterling]

So it isn't spam per se, because your users have elected to recieve this mail, it is just extra noise in the journal mailbox.

You could set up custom filtering and not archive messages based on Author but it will be a pain to manage.  You should also get this in writing from you Legal/Compliance team that they want these messages not journaled.

[JesusWept3]

Also it may actually be worth archiving those items, i know they're small and annoying, but a lot of them will contain comments, can show misappropriation of company time and resources and especially with social networks now, their content is coming under more and more scrutiny to the point where companies are paying lots of money for services and appliances to be able to archive from facebook etc

[TonySterling]

Yep, that is very true.  Sorta of the reason I suggested getting it in writing that Legal/Compliance doesn't want them.

[JesusWept3]

If you really really don't want those items archived, I would definitely look more at an anti spam solution that has black list capabilities, it'll mean less overhead for the exchange servers and also means that EV isnt taking a hit having to match each message to a rule and what not

[AndrewB]

i suppose it's all about determining at what point in the "food chain" are these messages an issue and how big of an issue they are (ROI to not archive them, not store them, not index them, not have to discover against them, etc).