Smart Alerts - Outgoing Email Alerts

With Outgoing Email Alerts, administrators can configure disclaimers or custom headers that will be added for emails being sent from within the organization. Outgoing alerts can be associated with a user, multiple users, or the entire organization, providing an added layer of security and awareness. These alerts can be configured to trigger alerts for various conditions, such as emails containing sensitive information, adherence to company policies, or the inclusion of specific keywords to the email. All the enabled alerts will be processed in sequence and trigger specified actions for emails with the matching conditions. 

Note:

  • It is mandatory to enable Organization Rules from the Spam Processing section in the Admin Console.
  • The Outgoing Alerts feature will be rolled out in a phased manner and be available only for organizations that use one of our paid plans.
  • If you want the option enabled for your organization, please reach out to us at support@zohomail.com.

Create New Alert

Follow these steps to create a new outgoing Alert: 

  1. Log in to Zoho Mail Admin Console and select Mail Settings on the left pane.
  2. Navigate to Smart Alerts and select Outgoing Alerts.
  3. Click Create Now or select the Create button from the top menu, if there are any existing alerts.
    create alert
     

    Note:

    If Organization Rules setting is not enabled, the below note will be displayed while creating an alert. Click Enable now to enable it and proceed with the configuration.
    Enable organizational rules

  4. Provide an Alert Name and an optional Alert Description. If the entered alert name is already in use, "Name already exists" warning is shown.
  5. Specify an Expiry date if needed.
  6. Select the Condition Type as per your requirement:
    • Apply for matching conditions - Preferred action will be performed only if the outgoing emails satisfy the conditions provided by you.
    • No Conditions. Apply to all emails. - When chosen, all the emails you receive will go through the preferred action.
  7. Select one or more Conditions, the Operating parameter and the corresponding Action.
  8. Click +Add values under Conditions to enter multiple values separated by a delimiter which you can choose from Choose delimiter drop-down. Select Custom from the drop-down, to add your own custom delimiter for the values and select Update.
  9. Select the users, to whom you want to apply the alert from the Apply To section:
    • All users - The alert will be applied to all the users in your organization.
    • Selected Users - The alert will be applied to the specific set of users you add.
    • Selected Groups/Shared Mailbox - The alert will be applied only to the users who are members of the specified groups/Shared Mailbox.
    • Excluded Users - The alert will not be applied to the selected list of users.
    • Excluded Groups/Shared Mailbox - The alert will not be applied to the users who are members of the selected groups/Shared Mailbox.
  10. Skip to this step if you chose All users.
  11. Select the users you want to add to the list and click Submit. You can also remove a user from the list by clicking the Delete icon next to the user.
  12. Click the Reset to default button to clear all the selections you have made in the Create Outgoing Alert page and start fresh.
  13. Review your alert and do one of the following:
    • Create and enable alert- Your alert will not only be created but also be activated automatically to start processing emails with respect to its conditions and actions.
    • Create alert - Your alert will only be created and not activated. That means if you want the alert to be applied to the emails you receive, you will have to manually activate it.
      create alert page
  14. Click Yes in the Confirm Action! dialog box.
  15. Select either Done or Go to created alert or Add more alerts depending on your requirement once the alert is created successfully.

    Note:
    The maximum number of outgoing alerts that can be configured for an organization is 500.

Available Conditions

Zoho Mail provides multiple conditions based on which you can add alerts to the outgoing emails. You can set up more than one condition in a single alert depending on your requirement. The various conditions are listed in the tables that follow:

Sender / From Validation
ParameterDescriptionValue
Sender email addressThe sender email address of the outgoing mailClick Add email addresses, enter the desired email address and click Add.
Sender display nameThe display name of the senderClick Add values, enter the user's display name and click Add.
Original sender's email addressEmail address of the actual sender of the outgoing mailClick Add email addresses, enter the preferred email address and click Add.
Reply-to email addressThe reverse-path/ bounce address of an outgoing emailClick Add email addresses, enter the preferred email address and click Add.
Sender IP addressThe IP address of the email senderEnter the sender's IP address that you wish to validate.

 

Recipient / To / Cc Validation
ParameterDescriptionValue
To/CC email addressThe email address in the To/CC fieldClick Add email addresses, enter the desired email address and click Add.
Recipient domainValidates the domain address of the recipientClick Add domains, enter one or more domain names and click Add.
Has external recipientValidates the presence of external users in the recipient listSelect Yes or No from the drop-down.
Recipient countThe number of recipients in the outgoing emailProvide a value between 1 to 100.
Internal recipient countValidates the number of internal recipients in the emailProvide a value between 1 to 100.
External recipient countValidates the number of external recipients in the emailProvide a value between 1 to 100.
Recipient*Validates the domain and email address in the emailClick Add email addresses or domains, enter the desired domain name or email address and click Add. If required, select the Skip validation for internal recipients option.

Note:

*Recipient- The outgoing alert will be processed only for those emails that "does not match" the email address or domain added to this alert.

 

Email Content Validation
ParameterDescriptionValue
Email languageThe language in which the email was composedClick Select languages, add the desired languages and click Add.
URL domain The domain names of the URLs available in email contentClick Add domains, enter one or more domain names and click Add.
MIME Message ID*The ID that can be gathered from a MIME email's headerClick Add values, enter the desired MIME value and click Add.
MIME size (in MB)The size of the non-text attachment specified in MBEnter a value between 1 to 40.

Note:

*MIME message - Multipurpose Internet Mail Extensions supports non-text email attachments. A MIME header is added to the original email header from where you can gather the unique content ID/message ID used to identify the message.

 

Sender Validations
ParameterDescriptionValue
Originating countryThe country from which the email was sentClick Select countries, add the desired countries and click Add.
X Mailer*The desktop client from which the email was sentClick Add values, enter the X-Mailer you wish to validate and click Add.
Sender involved in suspicious login activityChecks for any suspicious login activity of the senderSelect Yes or No from the drop-down.

Note:

*X-Mailer - Specifies which desktop client (For example, Apple client, Thunderbird, etc) was used to draft or send the email. Can be found in the email header.

 

Email Header Validation
ParameterDescriptionValue
User agentThe software/ Client used to send the emailsClick Add values, enter the user agent you wish to validate and click Add.
SubjectThe subject of the emailClick Add values, enter the desired subject and click Add.

 

AttachmentValidation
ParameterDescriptionValue
Attachment typeThe type of attached fileClick Select attachments, add the attachment types and click Add.
Has attachmentChecks if any file is attachedSelect Yes or No from the drop-down.
Attachment size (in MB)The size of the attached file in MBEnter a value between 1 to 40.

 

Spam Validations
ParameterDescriptionValue
Has macrosThe existence of macros in the email contentSelect Yes or No from the drop-down.
Has suspicious macrosThe existence of suspicious macros in the email contentSelect Yes or No from the drop-down.

 

Operating Parameters
OperatorsDescription
isThe respective parameter in the outgoing email should exactly match the given criteria value.
is notThe respective parameter in the outgoing email should not match the given criteria value.
containsThe respective parameter in the outgoing email doesn't have to be an exact match but will pass even if it contains the given criteria value.
does not containThe respective parameter in the outgoing email doesn't have to be an exact match but will pass if it does not contain the given criteria value.
begins withThe respective parameter in the outgoing email should begin with the given criteria value.
ends withThe respective parameter in the outgoing email should end with the given criteria value.
is emptyThe respective parameter in the outgoing email should be empty.
is not emptyThe respective parameter in the outgoing email should not be empty.
is group member inThe recipient is a part of the selected group.
is not group member inThe recipient is not a part of the selected group.
matchesThe respective parameter in the outgoing email should match the regular expression pattern.
Does not matchThe respective parameter in the outgoing email should not match the regular expression pattern.
trueThe given condition should be true.
falseThe given condition should be false.
is greater thanThe respective parameter in the outgoing email should only be greater than the given criteria value.
is lesser thanThe respective parameter in the outgoing email should only be lesser than the given criteria value.
is greater than or equal toThe respective parameter in the outgoing email can be greater than or equal to the given criteria value.
is lesser than or equal toThe respective parameter in the outgoing email can be lesser than or equal to the given criteria value.

After selecting the Conditions and the Operating parameters, provide the values with respect to the chosen conditions that need to be verified against. Upon providing these proceed to select the Actions that need to be performed for the emails with the chosen conditions.

Available Actions

The emails that match the specified conditions will be processed as per the actions defined in the alert. Select the necessary action and, if required, provide a value as given in the table that follows:

Available Actions
ActionDescriptionValue
Append custom X-HeaderA custom header with a name and value will be added to the emails.Click Add header details, provide the header name and value and click Add.
Append text to subjectThe prefix text that you configure will be included in the email subject.Click Add subject, enter the text which you want to be appended to the subject and click Add.
Add message above contentAdds a message above the email content for emails matching the given conditions.Click Add message, enter the message to be added above the email content and select Add.
Add message below contentAdds a message below the email content for emails matching the given conditions.Click Add message, enter the message to be added below the email content and select Add.

Note:

You can add a maximum of 5 actions to a single alert.

Filter

Once the alerts are created, they are listed under Outgoing Alerts home page. You can view and filter the alerts based on their status/action. Follow the below steps to perform the filter operation:

  1. Select Filter button on the Outgoing Alerts home page.
  2. Click the desired status/action from the drop-down. The types of alerts based on the status are:

    • Active Alerts - Lists all the alerts where the status is marked active.
    • Inactive Alerts - Lists all the alerts where the status is marked inactive.
    • Expired Alerts - Lists all the alerts where the set expiry date of the specific alert has been lapsed. However, you can modify the expiry date of an alert by hovering over the status and selecting a different date.
    Note: The expired alerts are also included in the filtered list when Inactive Alerts is selected from the Filter drop-down.
  3. Select Action from the Filter drop-down to filter alerts based on the available actions.

Alert processing and priority

Alerts are created to protect users from phishing or fraudulent emails by triggering a warning message that is configured under Outgoing Alerts. However, these alerts are handled based on their priority. The types of priority available are:

Sequential priority

You can add any number of outgoing alerts to process different types of outgoing emails. In the case of multiple alerts, the sequence of processing is determined by the sequence in which they are listed. The alert with the highest priority (1), i.e., the one listed first, will take precedence over alerts with lower priorities (2) listed subsequently. Once an email matches the conditions of a particular alert, the actions specified in the alert will be applied to the email. The same email will not be scrutinized against the subsequent alerts in the list.

Apply To priority

When you create an outgoing alert, you can choose who the alert applies to or excludes using the Apply To section. Each selection type has its own priority, and the alert is evaluated based on these priorities:

  • All Users
    • Selected users (priority 2)
    • Selected groups/Shared Mailbox (priority 4)
  • Exclude users or groups
    • Exclude users (priority 1)
    • Exclude groups/Shared Mailbox (priority 3)

When an alert is evaluated, the system checks the selected and excluded entities in the order of their priority. This ensures that higher-priority exclusions or inclusions override lower-priority selections.

Below are detailed examples to illustrate this:

Case 1:  If a user is added under Exclude users, the alert will not be applied to that user, even if the group they belong to is included under Selected groups/Shared Mailbox. This happens because Exclude users has the highest priority and is processed first.

Case 2: If a user’s group is added under Exclude groups/Shared Mailbox, but the individual user is added under Selected users, the alert will apply to that user. This is because Selected users has a higher priority than Exclude groups/Shared Mailbox

Case 3: When a user is added under Exclude users, and no other selections are made under the All Users category, the alert will still be applicable to all users by default, except for the users listed under Exclude users. This happens because All Users is considered the default scope for every alert.

Modify Outgoing Alert

Follow the below steps to edit an alert:

  1. Log in to Zoho Mail Admin Console and select Mail Settings on the left pane.
  2. Navigate to Smart Alerts and select Outgoing Alerts.
  3. Select the alert that requires modification from the list and click Edit in the top right corner.
  4. Make the necessary changes and click Update.

Additionally, you can search and edit the outgoing email alerts based on the associated users. Navigate to the search bar and select the contains or applicable to parameters from the listing as per your requirements. Choose a specific user from the list and press enter. All the outgoing alerts associated with or not associated with that particular user will be displayed. You can then select the alerts from the list and make the required changes.
search outgoing alerts

Enable or Disable an Alert

Follow the below steps to enable or disable an Alert:

  1. Log in to Zoho Mail Admin Console and select Mail Settings on the left pane.
  2. Navigate to Smart Alerts and select Outgoing Alerts.
  3. Toggle the status button to   ON or   OFF in order to enable or disable an alert.
    Enable or disable outgoing alerts

Remove Alerts from the list

In situations where an alert is no longer required or has expired, they can be removed by using the Delete option. Follow these steps to delete an alert.

  1. Log in to Zoho Mail Admin Console and select Mail Settings on the left pane.
  2. Navigate to Smart Alerts and select Outgoing Alerts.
  3. To remove an Alert:
    • Hover over an existing or expired alert and click the   delete icon.
    • Alternatively, you can select the desired alert, click Delete on the top menu and choose the required option:
      • Delete selected alerts
      • Delete all expired alerts
      • Delete all alerts
        Delete outgoing alert
  4. Click Delete in the confirmation dialog that appears.
Note:
When a filter is applied, the Delete drop-down includes additional value of Delete filtered alerts for quick deletion of alerts that satisfies a specific filter.

This will remove the outgoing alerts from your list. Please note that once removed, the alerts cannot be retrieved and will be permanently removed from the list.

PREVIOUS

UP NEXT