Outbound email DLP test (SMTP / Outlook)
| Parameter | Value |
|---|---|
| To | go@dlpbench.com |
| SMTP | hostus5.fornex.host · 465 |
| IMAP poll | ~10–60 s · keep up to 1 h · ≤100 messages / From / day |
Accepted messages
Employees use email every day. DLP should control this channel — intercept outbound messages and attachments, and enforce policies that block external destinations or match on content.
To start — take sample data from the panel on the right or from Sample data, send a message to the mailbox above from your work address, and wait 10–60 seconds. Enter the sender email in the field above and click Refresh. A row with body and attachments means the message arrived; DLP or the gateway did not stop it. No message after a couple of minutes — check your log and quarantine. If block policies are not configured, confirm email interception in your DLP management console.
FAQ
What do I enter in the sender address field?
So users only see their own test mail, we identify the sender. Enter the email address you used to send the message to our mailbox.
How long should I wait, and what if the message never appears?
The mailbox is polled every 10–60 seconds. If after a couple of minutes the message is still missing, your DLP may have blocked it. Check logs on your side. We keep messages no more than 1 hour.
Is an attachment enough, or do I need body text too?
Check three cases: a text message with random data, a text message with data your policies protect, and messages with attachments.
Where do I get data for the message?
Use our sensitive-data generators — the panel on the right, Sample data, or the generator — ready names, SSNs, cards, and files.
How do I test email?
Enable a rule on SSN or card. Send several messages to the address on this page: neutral text, text with synthetic data, an attachment with synthetic data. Messages appear on the range after the poll delay (tens of seconds); if after a couple of minutes there is still no message, that is not proof of a block yet — check the address, sender-side spam, then the email DLP log.
If the message is in the list on the site, the outbound channel delivered it to an external mailbox. Whether that matches the expected policy action (event / quarantine / block) is on your side. Prefer a separate route or test domain for a pilot: a bad rule on all outbound mail hurts the business faster than it helps security.
Use this service during a DLP pilot or in production. Also re-check perimeter control periodically so you know every exfil channel you care about is covered.
Keep testing exfil channels
Try submitting data through a web form, or repeat with other sample data.