Countermeasures against misdirected e-mails

HENNGE Email DLP

The Problem of Email Mistakes

Mistakenly sent e-mails are often caused by inadvertent errors such as wrong addresses or attached files.
Accidents involving the handling of personal information are also often the result of email miscommunication, and this is one of the issues that companies must address as part of their information leakage prevention measures.
While there are some methods that require human intervention, such as double-checking by coworkers or superiors or requiring finger pointing before sending, these methods are becoming more difficult to implement due to changes in the work environment, such as increased efficiency and hybrid work styles.

Flexibly configurable for each business partner and each person
Email misdelivery countermeasure solution that can be flexibly configured for each business partner and person.
“HENNGE Email DLP”.

HENNGE Email DLP is a solution that works in conjunction with Microsoft 365 or Google Workspace email services to prevent email misdirection.
Not only can you set up filters such as temporary hold and supervisor approval according to your clients and sending users, but you can also select the sending method of attachments according to the security policy of the sending recipient.

HENNGE Email DLP diagram

Example of use

A sales department that frequently exchanges many e-mails with people outside the company is frequently sending erroneous e-mails and would like to take measures to prevent such miscommunications.

When an employee in the sales department sends an e-mail to an outside party, the e-mail is put on hold for 10 minutes so that team members can delete or stop the e-mail during the hold period.

I am concerned that a prospective retiree may have sent an e-mail containing confidential information outside the company.

When a prospective retiree sends an e-mail to outside the company, automatically add his/her supervisor to Bcc.

We want to deploy company-wide automatic URL conversion of e-mail attachments as a PPAP measure, but we want to send only to group companies without changing the attachment.

If the recipient is the domain of a group company, send the attachment as is without encryption.

Whenever a support person sends an e-mail to an external address, I want to include the support-only group address in the CC.

If a support person’s e-mail to a customer does not include the support-only group address in the CC, the e-mail will be automatically deleted.

By setting filter rules according to business partners and sending users
E-mail error countermeasures are implemented for outgoing e-mails

Mail processing operation and mail processing contents

Processing Operation Content of processing
FilteringTemporary hold Temporarily holds outgoing mail and allows deletion of mail during the hold period
Delete Deletes e-mails that meet pre-defined conditions
Supervisor Approval Outgoing mail can be temporarily put on hold and sent only after approval by a supervisor.
Add Bcc A specific email address can be added to the Bcc of emails that meet pre-defined conditions and sent.
Team Mail Temporary hold on outgoing emails, allowing team members to delete or stop sending emails during the hold period.
Sent filesAutomatic URL conversion of attached files
(HENNGE Secure Download)
Enables automatic URL conversion of email attachments as a countermeasure against PPPAP
Automatic ZIP encryption of attachments Enables automatic URL encryption of email attachments
OthersForced conversion of external email addresses When an external mail address exceeding the threshold value is listed in the To, Cc, or Bcc field,
Mail headers can be forced to be split if an external mail address exceeding the threshold is included in the To, Cc, or Bcc field.
Group Information Synchronization Distribution Groups and Security Groups in Microsoft 365,
Google Workspace Google Groups information can be synchronized.

Example of mail filter settings

By whom To whom What rules What to do Expected Effects
Group of sales employees To outside parties Check the number of destination domains
(2 or more)
Temporary hold
(5 minutes)
Alerts the recipient that an incorrect third-party domain has not been added
Alert the user whether the wrong third-party domain has been added.
Product Development Employee Group To outside parties Check for specific keywords
(e.g., letters such as “Outside Confidential”, credit card numbers)
Approval Identify the information you want to protect with keywords,
Prevent leakage of confidential information
Prospective retirees To outside parties Add to BCC Add BCC Forward email correspondence of a prospective retiree
Forwarding email correspondence to a supervisor or other person without notifying the individual
Internal users To an external recipient Check mail size
(5MB or larger)
Secure Download If the mail size including attachments
attachments are automatically sent in Secure Download
Secure download is used to send the file.