Configuring Mail Relay
Configuring Settings for the Mail Relay
You can use the Data Loss Prevention Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP. Wizard to configure the settings for the mail relay.

Open the DLP tab in SmartDashboard:
-
In SmartConsole
Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., select Security Policies > Shared Policies > DLP and click Open DLP Policy in SmartDashboard.
SmartDashboard
Legacy Check Point GUI client used to create and manage the security settings in versions R77.30 and lower. In versions R80.X and higher is still used to configure specific legacy settings. opens and shows the DLP tab.
-
From the navigation tree, click Additional Settings > Mail Server.
Configure the mail relay for anonymous SMTP connections:
-
Click Send emails using this mail server.
-
Select the mail server.
If the mail server object does not exist, create it.
-
Click OK.
Configure the mail server object for authenticated SMTP connections:
-
Click Send emails using this mail server.
-
Select a mail server from the list.
-
If the mail server does not exist, create it.
-
Click Mail Servers.
-
Select the server from the list.
-
Click Edit.
The Mail Server window opens.
-
Click Server Requires Authentication.
-
Enter the authentication credentials: User Name and Password.
Complete the Mail Relay configuration:
-
Click Save and then close SmartDashboard.
-
In SmartConsole, install policy.
-
On the mail server itself:
Configure the mail relay to accept anonymous connections from the DLP Gateway. For details, consult the vendor documentation. For example, on Microsoft Exchange Servers, configure the permissions of the default receive connector (or other relevant connector that handles SMTP traffic) for anonymous users.
Configuring a Dedicated DLP Gateway and Relay on DMZ

-
In SmartConsole, select Security Policies > Shared Policies > DLP and click Open DLP Policy in SmartDashboard.
SmartDashboard opens and shows the DLP tab.
-
Click Send emails using this mail server.
-
Select the mail server.
If the mail server object does not exist, create it.
-
Click OK.
Configure the mail server object for authenticated SMTP connections:
-
Click Send emails using this mail server.
-
Select a mail server from the list.
-
If the mail server does not exist, create it.
-
Click Mail Servers.
-
Select the server from the list.
-
Click Edit.
The Mail Server window opens.
-
Click Server Requires Authentication.
-
Enter the authentication credentials: User Name and Password.
Complete the Mail Relay configuration:
-
Click Save and then close SmartDashboard.
-
In SmartConsole, install policy.
-
On the mail server itself:
Configure the mail relay to accept anonymous connections from the DLP Gateway. For details, consult the vendor documentation. For example, on Microsoft Exchange Servers, configure the permissions of the default receive connector (or other relevant connector that handles SMTP traffic) for anonymous users.
-
In SmartConsole, install policy.