How to enable Full History Log for Inbound and Outbound Emails

03/26/2020 961 10387

DESCRIPTION:

This KB is for Email Security Support Engineer to enable Full History Logging which required in few corner cases  

CAUSE:

Full History logging can help to collect email sample/file attachment before being analyzed for threats

RESOLUTION:

'Save a Copy of every email' option under Manage | System Setup | Server | Advanced provides Support team with the ability to save a copy of every email that enters or leaves the organization.

When this feature is enabled, folders containing the entire contents of every email are created in the logs directory of each server that analyzes email traffic (all-in-one servers and remote analyzers). The emails are saved before being analyzed for threats

Saving inbound and outbound emails can be handled independently, so there are separate folders for saved inbound and outbound email. We can download log files under 'Download System/ Log Files' option under Manage | System Setup | Server | Advanced | Miscellaneous Settings.

Email entering your organization is located in: 

logsfullhistory_in 

Email leaving your organization is located in: 

logsfullhistory_out

NOTE: If the navigation or the screenshot looks different from the one mentioned above , you may be in an older firmware version and would require a firmware upgrade. Please refer the link below to upgrade the firmware to latest version.

https://www.sonicwall.com/en-us/support/knowledge-base/170504270079039