Outbound Filter - Account Blocking
Account Suspension (page header: Account Blocking) lists internal mail accounts that are not allowed to send any outbound mail. Use this page to immediately stop a compromised, departing, or misbehaving account from sending without changing the user's mailbox password.
Page Layout
The page header reads Account Blocking. The sidebar entry uses the label Account Suspension.
Search Criteria
A single field:
- Account — free-text input for the mail account being searched
- A blue Search button
Action Bar
A counter (for example TOTAL - 0) is followed by:
| Button | Purpose |
|---|---|
| Add | Open the Add Account Suspension dialog |
| Delete | Lift suspension on the accounts selected by the row checkboxes |
The View 30 dropdown on the right controls page size.
Columns
| Column | Description |
|---|---|
| ☐ | Row selection checkbox |
| Application Conditions | Conditions under which the suspension applies (for example all outbound, or only outside business hours) |
| Group Name | The group the suspended account belongs to |
| Domain | The domain part of the suspended account |
| Account | The local part of the suspended account |
| Registrant | Administrator who applied the suspension |
| Date | Timestamp the suspension was applied |
When to Suspend an Account
Suspend an account when you need to stop outbound mail immediately. Common cases:
- The account has been compromised — credentials are leaked or in active abuse
- The user has departed the organization but the mailbox is still being kept for archive
- An automated system is malfunctioning and sending high volumes of unintended mail
- A user is on extended leave and you want to prevent autoreplies or accidental sends
Suspension is not a password change — the user can still log in and read mail. Only outbound delivery is stopped.
Lifting a Suspension
Select the row in the table and click Delete. The account is removed from the suspension list and outbound delivery resumes immediately on the next send attempt.
Account Suspension blocks mail at the SGuard layer. The user's mail client will appear to send successfully (the message lands in Sent), but SGuard discards it during outbound inspection. Communicate clearly with suspended users so they understand why their mail is not arriving.
For permanent departures, also disable the underlying mail account (or remove its alias). Account Suspension is best for temporary or investigation-driven blocks.