IBM Support

Block Secure Mail app from downloading remote images

Release Notes


Abstract

Remote images are URLs that point to online pictures. MaaS360 adds support to block Secure Mail from downloading the remote images when the emails are opened.

Content

Note:

  • The feature blocks only remote images and does not impact other image types such as inline attachments, embedded images, etc.
  • Only the remote images in Mail detail view are blocked. The Reply, Forward, and Print screens are out of the scope of this feature.
  • Administrators must republish the policy to apply the new changes.
  • The policy is applicable to both primary and secondary mail accounts.

Persona policies

Administrators must configure the following persona policies to allow/block remote images:

Path: Persona policy > Email > Security

Old policies

  • Always Allow Images from Domains - If this policy is turned on, the images from the remote URLs in the emails received from allowed domains are automatically displayed. In this release, MaaS360 removed the MaaS360 for iOS app setting Show Email Images that allowed users to override the policy defined by the administrators. When users turned on Show Email Images, the remote images from the external domains were also downloaded automatically. Note: If allowed domains are not configured, remote images from all domains are blocked except the user's domain.

New policies

  • Prefix used for mails from external domains - The comma-separated list of prefixes configured in mail servers to mark external domain emails. Example: [ External ]
  • Prefix location for mails from external domains - The prefix location marked in the mail servers to mark external domain emails. Supported values: Email subject, body, or both.
  • Block remote images in emails from external domains - If turned on, all the remote images (embedded URLs) from external domains are blocked.
Is the email from the external sender domain? Does the mail have a prefix as specified in the policy? Are remote images from external senders blocked? Does the domain match the allowed domains in Always allow images from domains? Is the remote image displayed?

Yes

Yes No Not configured Yes

NO

NO Yes Not configured Yes
Yes Yes Yes Not configured No

Yes

Yes Yes Yes Yes
Yes Yes Yes No No

NO

NO Yes No Yes

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Document Information

Modified date:
09 March 2021

UID

ibm16373604