Is the XEXCH50 (Exchange ESMTP extension) supported?

book

Article ID: 159957

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Monitor Data Loss Prevention Network Prevent for Email Data Loss Prevention Network Prevent for Web Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

Does Vontu support the emails sent using the XEXCH50 commands? 

Resolution

Inconsistency is observed between an incident snapshot and the original message.
Sometimes the message body is full of garbled (or encrypted) characters on the incident snapshot and it is different than the original message.

If you capture the SMTP traffic you will see that the message is written using the XEXCH50 commands.

The XEXCH50 is an Exchange ESMTP extension that is used to relay certain properties between Exchange servers.

XEXCH50 is not an RFC compliant SMTP message and at this point is not supported.