Not using exchange server - How to archive emails?

[ame540]

Hi.

Our company uses two email servers for our employees that we simply POP to get email. I am concerned about things like:

NASD 3110
SEC Rules 17a-3 & 17a-4
Sarbanes-Oxley (SOX) Compliance
Health Insurance Portability & Accountability Act (HIPPA)

That pertain to having accountability for all past email records. We have nothing like that in place at this time. Since we are not using an exchange server and clients simple use outlook to pull all their email messages (and i dont want to rely on them for records management) What options do I have?

1) can i have a device that gets sent a copy of all emails that go through the pop server?

2) is there a device that can poll ALL pop accounts?

I really dont know where to get started so I'm looking for some advice. Thanks.

 

[franklin97355]

You should keep a record of the emails at the server level after they are received and before they are delivered. Depending on the servers you use there are ways to do this.

The answer is "42"

 

[ame540]

Couple of options that i found:

http://www.compliancevaults.com/

http://www.redmap.com/products/CaptureMail Brochure with Product Guide.pdf

 

[franklin97355]

OK, try those.

The answer is "42"

 

[ricolame]

yup it could be done on server side.

Am on qmail.. does exchange do that too ? wasnt aware of that though.

All incoming and outgoing mails were made a copy to a log account where i'll receive through POP access and store them locally.

It's interesting to see all the mail failure notification, and the kind of stats you can draw from it, like who are the one who are abusing their mail, max file size sent, etc.

with regards,