Email and Messengers

This section covers the interception and monitoring of emails and instant messages.

Key Notes

  • Some instant messengers requires separate options because enabling them creates an additional process in the system.

  • Text messages and related files from the Express messenger are automatically intercepted without any additional settings. After integration via ICAP, they will appear on the server under the Instant Message and Intercepted File event types.

  • To intercept files, enable Shadow Copying in the Files configuration section.

Modules Description

Module

Description

Web Mail

This module intercepts outgoing messages and their drafts across major mail services, including Gmail, Outlook.com,
Yandex, Mail.ru, Rambler.ru, VK Mail, and others.

This feature supports all major browsers, including Google Chrome, Mozilla Firefox, Internet Explorer, Opera,
Yandex Browser, and 360 Browser.

Note: VK Mail intercepts only cloud storage. Interception of local storage is configured separately in the
Email and Messengers module under the Addresses of Local Server’s rule.

Intercepted email drafts are located in the Event Lens with the prefix [Draft] in the Window Title bar.

E-mail

Interception of emails via POP, IMAP, and SMTP protocols. Compatible with email clients such as Outlook, Thunderbird,
The Bat, and P7-Office Organizer.

E-mail
(MAPI/Exchange)

Supports email interception from Microsoft Exchange mail servers.

Note: The agent periodically connects to the server to download required information. As a result, MS Outlook may
occasionally display an error indicating it cannot connect to the Exchange server. To prevent this, consider
disabling the module.

Intercept mail interception from CommuniGate Pro (CGP). For CGP, basic email interception is sufficient without
requiring a connector.

Instant messengers

Supports internet messengers interception. Compatible clients include Skype, ICQ, QIP, Jabber, Agent Mail.ru,
and others via ICQ, MMP, and XMPP protocols.

To intercept screenshots sent to Skype, additionally enable the Clipboard module.

MS Teams

Intercept messages and files sent or received via the MS Teams desktop or web application.

Note: This feature requires the Instant Messenger option to be enabled.

WhatsApp

Intercepts incoming and outgoing messages, files, and voice messages in the WhatsApp desktop app and on web.whatsapp.com.
The module doesn`t intercept messages and attachments in the desktop version of WhatsApp downloaded from the Microsoft Store.

Note: This feature requires the Instant Messenger option to be enabled.

Google Drive

Intercepts files uploaded to Google Drive.

Telegram

Intercepts chats and files in the Telegram desktop application and the web version on web.telegram.org.
Audio messages can also be intercepted in the web version.

If the Network Monitoring option is disabled, interception will be limited to the desktop application.

Global Telegram
File Search

Intercepts both portable and desktop versions of Telegram installed in non-standard file paths.
Scans all folders within the Windows operating system to detect Telegram files for interception.

OneDrive

Intercepts files sent or received to the OneDrive cloud storage.
Only files that do not exceed the size of the shadow copy file will be intercepted.

User actions are captured in the Instant Message event.
The Intercepted File event is generated with a shadow copy of the file.

WebDAV

Intercepts files sent or received to WebDAV-based cloud storage such as ownCloud or Nextcloud.
Only files that do not exceed the size of the shadow copy file will be intercepted.

User actions are recorded in Instant Message event.
The Intercepted File event is created with a shadow copy of the file.

Yandex Disk

Only the web version is supported. Events and attachments are not intercepted in the Yandex.Disk desktop app.
In the web version, the agent intercepts the following events:

* Uploading and downloading files
* Deleting and restoring files from the trash
* Emptying the trash
* Moving and renaming files
* Creating albums and adding photos
* Publishing resources (except photos)


Only files that do not exceed the size of the shadow copy file will be intercepted.

User actions are recorded in Instant Message event.
The Intercepted File event is created with a shadow copy of the file.

Mail Cloud

Intercepts file uploaded and downloaded to the Mail.ru cloud.
Interception is recorded in the Instant Message event.
The Intercepted File event is created with a shadow copy of the file.
Only files that do not exceed the size of the shadow copy file will be intercepted.

Service Sreda

Intercepts outgoing and incoming email.
Intercepts email attachments.
Intercepts outgoing and incoming messages and attachments from the instant messenger.
All intercepted messages are recorded on the server as the Instant Message event.
File interception is available only for files attached via Attach File option.

Bitrix 24

Intercept messages and files sent or received through the Bitrix 24 app or web interface.
Requires the Instant Messenger option to be enabled.