Adding Email Addresses and Domains to My Organization

You specify the DLP internal domains and specific email addresses that are included in My Organization. You can add domains to include your remote offices and branch offices as part of the definition of what is My Organization.

Important - If your organization uses cloud servers, you should not add them. The technology governing cloud servers makes them inherently insecure, taking the control of your data away from your administration and giving it to a third party. It is recommended to detect all sensitive data sent to and from cloud servers, rather than to trust a service provider to make sure that other clients do not have access to your data.

Add email addresses to include those that are safe for general data sharing. You should not add the private email addresses of any employees or managers. Taking home confidential data is a bad practice that you should discourage and eventually prevent.

Notes:

  • When you add domains, do not use the @ sign. A valid domain example is: example.com

  • If you add a domain, it catches all sub domains as well. For example, if the domain is example.com, email addresses such as jsmith@uk.example.com are also considered part of My Organization.

  • SMTP traffic is considered internal if the domain of the email is specified in My Organization and if the IP address of the sender is an interface/network specified in My Organization.

Important - Do not remove the default domain definition. You must have a domain in the My Organization definition, or an LDAP server specified. If you do not have the domain defined (either by Email Address Domain or LDAP Account Unit) for My Organization, DLP does not scan emails.

To add domains and email addresses to My Organization:

  1. In SmartConsoleClosed Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on., open the Data Loss PreventionClosed Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP. tab.

  2. Click My Organization.

  3. In the Email Addresses area, enter a domain or specific email address.

  4. Click Add.