Outbound Gmail traffic is captured but there is no data in the message body.
Last Updated June 17, 2008
Capturing valid outbound Gmail requires a keyword (msgbody) due to keepalive
A policy looking at mail.google.com will be triggered by a keepalive that gmail sends every 6 minutes when left open. The keepalive contains a lot of data but no msgbody.
Add the keyword "msgbody" to the relevant policy. When you click on the "Message Body" section of the incident report, you should be able to view the message. If you search the "Message Body" section you should see values similar to : name: msgbody value: (body)
Imported Document ID: TECH220776
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe