There are three types of notices that can be sent when the Email Security — Server appliance detects a malicious email:
Block notices can be sent to the intended recipients of malicious emails to inform them the emails were not delivered because the appliance blocked them.
Admin notices contain the same text as block notices. They are sent to specified administrators when the appliance detects a malicious email, regardless of whether it was blocked.
bcc notices are copies of the original malicious emails that have a different Subject header. They are sent to specified forensic analysts when the appliance detects a malicious email, regardless of whether it was blocked.
Note
You can customize the default text for the Subject line and message body used in "block" and "admin" notices.
Operator or Admin access.
Domain and next-hop settings are configured.
Block, Monitor, and Drop analysis modes: SMTP interface is configured with an IP address and network mask.