Journal Rules

Email Security creates a Journal rule that configures Microsoft 365 to send a copy of all scoped emails to the journaling mailbox used by Email Security for inspection.

Email Security uses this Journal rule only for policies in Detect and Detect and Remediate protection modes.

Journal rule name: Check Point - Monitor

Journal Reports

Email Security configures the Journal rule to send the Journal reports to [portal]@[portal]-mail.checkpointcloudsec.com

It also configures a mailbox for undeliverable journal reports, if the mailbox was not configured yet for the Check Point Portal tenant.

Email Security sends the undeliverable journal reports to these mailboxes when they are not deliverable to the email address specified in the journal rule: