Hosted Email Security 9.0 Admin Guide


SonicWall <product name>’s Auditing module enables the user to monitor all emails, both inbound and outbound, that pass through the SonicWall <product name>. This allows the user to monitor where emails have filtered into or locate the destination of a particular email.

The default view after selecting Auditing > Messages is to see inbound messages captured in the auditing database. The messages are displayed based on the auditing parameters you set. Click on the Outbound button to see the outbound messages. Click the Inbound button to return to the inbound view.

The information reviewed in the following sections apply to both the Inbound and Outbound views:

Setting Audit Parameters

To set the auditing parameters:
Click the Settings button (far right).

Select on or off to enable or disable the following settings:
Auditing for inbound email
Auditing for outbound email
Enable Judgment Details logging
To specify how long you want to keep the auditing files, select one of the preset times to Keep Email auditing files for.
Select Apply to save the settings.

Searches, Filters and Sorts

SonicWall <product name> offers several ways to manipulate the data so you can more easily review and act on it.

Simple Search Queries

To perform a simple search:
Enter the text you want to search for in the Simple search field.

Surround sentence fragments with quotes (for example: “look for me”). Boolean operators AND, OR, and NOT are supported.

Select the field to search on from the drop-down menu.

Choose from Subject, To, From, or Unique Message ID.

Click on Search.

The results are displayed in the data table.

Advanced Search Filters

Advanced search filters are performed directly on the data that's displayed. Select the down arrow next to the column title to filter the data. Some columns are searchable by typing in a string of text to search on. Be sure to surround the string with quotes. Boolean operators are also supported for string searches. Other columns allow you to choose one or more filters from a list of pre-populated options. The results of any filtering are immediately shown in the data table. You can filter more than one column at a time. Click on the Clear Filters button to clear any filters you selected.


The columns in the data table can be sorted in ascending or descending order.

To sort a column:
Click in the column you want to sort. A small arrowhead appears in the column. The arrowhead points up to indicate ascending order and down to indicate descending order.
Click in the column again to change the direction of the arrowhead. The data refreshes immediately to reflect the choice you made.
Click on the Reset to Default View button to reset back to the prior view.

Sharing Data

Data from the audit messages can be shared or saved several different ways:


Button name


Send Copy To

Sends selected messages to a specific recipient. Select one message by clicking on it. Select a series of messages by clicking on the first message and then shift-clicking on the last one. Select disconnected messages by control-clicking on each one you want.


Sends the selected messages to the downloads file in zip format.

Export to csv

Exports the data displayed to a file in CSV format.

Release from Capture Box

Releases an email from the Capture Box before analysis is complete.


Refreshes the data in the table.

Managing the Data Table Format

Manage the table format by using the buttons on the right.


Button name


Add Columns

Select Add Columns to get the drop down menu. Check the box for the data you want to appear in the table. Uncheck them to remove them from the table.

Clear Filters

Clears any filters you set during an Advanced Search.

Save View

Saves the view you created after adding or removing columns.

Reset to Default View

Resets the data table back to the default view.