What is it?
Anyone with an email account is increasingly likely, from time to time, to be sent unsolicited/junk email, commonly known as 'spam'.
It is Hampshire County Council's policy to take all reasonable steps to prevent the receipt of such mail by the users of its IT services but without hindering normal business.
There are lots of different types of spam (see types), but regardless of which type of email you may receive in your inbox, the action to take is always the same - do not open the spam, delete it from your inbox.
Types of spam
Phishing emails look like they've come from websites you trust, such as your bank or credit card company, and will ask you to provide personal information such as credit card numbers, passwords, account data, or other information. Never respond to this type of email.
This type of spam is not really any different from junk mail delivered via the postal services. However, under an EU directive, anyone in the EU who wants to mail you advertising or marketing material on a regular basis must have your permission to do so.
Hoax virus warnings
These emails pretend to come from an authoritative source (eg. AOL, Microsoft, IBM) and warn about new viruses, encouraging you to forward the email to your friends and colleagues. Never forward this type of email. If you are unsure about it speak to your departmental IT support contact. Virus warnings believed to be genuine should be forwarded to IT Services Help Desk.
Pornographic and obscene
Pornographic and obscene text and images can be extremely upsetting and worrying. If you are particularly upset, talk to someone about your experience - you may want to speak with your line manager or contact the Employee Support Line.
Emails promising money (known as 'advance fee fraud')
There are a number of variations but typically, you will be promised a large sum of money if you help with transferring sums of money to the UK. Do not be tempted - responding to this type of email has cost many people thousands of pounds. Find out more on the Hampshire Constabulary website under Advice and Information.
Investment related fraud
Investment related fraud e-mail are on the increase, although there are no reports of any staff having been targeted as yet. Follow the advice provided above for 'advance fee fraud'. Get rich quick schemes rarely, if ever, deliver what they promise.
Emails which encourage you to forward further emails to all of your friends and colleagues are simply 'electronic chain letters'. Examples include referring to the plight of a terminally ill child, promising donations for treatment from a named organisation for every forwarded email.
All incoming email is scanned by a filter (a piece of software called Mimecast) which decides if individual emails should be blocked, held in quarantine or delivered to your Outlook inbox.
Regrettably, some spam may still be received directly in your inbox, but for every item received in quarantine or your inbox, there are hundreds blocked by Mimecast.
Messages on hold (in quarantine)
If the email filter thinks that an email may be spam, it will quarantine it and send you an email with the title "Email Filtering Service Messages on hold for ******@hants.gov.uk.
When you receive a quarantine email, you will see a list of all current quarantined emails, and for each email you have three options:
Permit Sender - will release the email and allow all future emails from the sender through to your inbox
Release Email - will only release the current email, future emails may be quarantined
Reject Email - this will block the current email and any future emails from the sender.
Click on the appropriate option for each email listed. When you have dealt with each email, you can delete the "Email Filtering Service.." email.
Tip: When you select one of these options, a Mimecast pop up window will appear confirming the action has been successful - this will happen for each message listed on the email, please close these windows down. A new feature will be rolled out shortly to help manage this.
Quarantine notifications are sent regularly (four times a day Monday-Friday and twice daily Saturday and Sunday). But you can check what messages you have on hold at any time by opening the Mimecast tab in Outlook and clicking on
View 'On Hold' messages (at any time)
You can view Email Filtering Service Messages at any time. This is useful if you are expecting an email but haven't received it in your inbox and suspect that it may have been quarantined.
To view messages that are currently quarantined:
Go to the Mimecast tab, click On Hold Messages then Personal On Hold.
A new window will open which will display all 'on hold' messages for you.
On the Personal tab, scroll through the list on the left and select an email to view the content on the right (NB. the Moderated tab is not available to use and should be ignored).
Once you've selected an email you can view what action you want to take. The options you see may vary:
Releases the email to your inbox and adds the sender's email address to your list of permitted senders.
Blocks any future emails from this sender.
Report the email to the Mimecast Security team (the sender of the email is added to your blocked senders list).
The email is removed from the list.
The email is released from the list to your Outlook inbox.
Spam in Outlook
The Mimecast tab in Outlook allows you to:
Report Spam which you've received in your inbox
Block Sender, block an address or domain
Manage Senders, view a list of senders which you've permitted or blocked and update list if required
View On Hold Messages, view on hold emails at any time without having to wait for the scheduled quarantine email.
The Mimecast tab may take a few minutes to load when you open Outlook, and you will also see a window at the foot of the screen which will disappear once Outlook is loaded.
Tip: You can also right click emails and select the Report Spam or Block Sender options from the menu displayed.
If you respond to a spam email in error and think that you may have divulged your Hantsnet ID and password, you must contact the IT Service Desk immediately on 01962 847000 to advise them (this can be done anytime - 24hr x 7 days).
Tip: If you are receiving emails from sites that you subscribed to, but now do not want to receive emails from, return to the site and unsubscribe to prevent further emails being sent.
If you receive an email in your inbox which has not been blocked by the spam filter, you can report it as spam.
Simply select the email, go to the Mimecast tab and click Report Spam (or right-click on the email and select Report Spam from the menu).
A Confirm window will open asking Are you sure you want to report this item as Spam?, click Yes.
Use this option if you want to block emails from a specific sender or domain (ie everything from dealchecker.com)
Select the email, go to the Mimecast tab and click the Block Sender button (or right-click on the email and select Block Sender from the menu).
Select whether you want to block just the Sender's Address or everything from the Sender's Domain.
A Confirm window will open asking Are you sure you want to block this Address (or Domain), click Yes.
Use this option to manage senders.
Go to the Mimecast tab, click the Managed Senders option and a new window will open.
Click on the options along the top to view:
Blocked - lists all blocked senders
Permitted - lists all senders which you've 'allowed' from quarantine emails
Auto - any address that you send an email to will be added to the Auto list.
If you have a long list of entries in a list, you can use:
Filter - type in what you are looking for
All Items - click on the drop down arrow to view addresses or domains only.
For each of the three lists you can:
Add - click on Add and a new window will open where you can type in an address or domain, then click OK to save
Remove - hover over an item in a list and select Remove.
Click Close when you have finished updating this area.
If the spam filter has quarantined any of your emails, you will receive an 'Email Filtering Service' email (see previous tab).
If you are expecting an email but haven't received it in your inbox, and suspect that it may have been quarantined, you can view 'Email Filtering Service Messages' at any time. To view the messages that are currently quarantined, go to the Mimecast tab, click On Hold Messages then Personal On Hold. See the previous tab ('Spam filter') for more information
Be very careful who you give your email address to.
Always tick the "no" check box when a company asks if it can share your email address.
Never reply to spam email - by doing so you are simply confirming that your address is genuine, the flood of spam emails you receive is certain to increase as a result.
Do not believe messages which claim not to be spam because you can unsubscribe from them by clicking on an 'unsubscribe' link - if you have not specifically requested a marketing message, it is spam - period.
And likewise, do not click the link to 'Unsubscribe' to mailings you never asked for in the first place - again, all this does is confirm to the spammers that your address is genuine.
Avoid using your email address on Web sites that offer 'free' services such as 'free' greeting cards or a joke a day - these companies often sell your address information to email mass-marketers.
Similarly, avoid giving out the email addresses of friends and colleagues to such companies and ask your friends and workmates not to do this with your email address.
If you are receiving emails from sites that you subscribed to, but now do not want to receive emails from, return to the site and unsubscribe to prevent further emails being sent.
How will I know if an email sent to me has been classed as spam?
All corporate users will receive email quarantine notices in their inbox which will ask them to decide what they want to do with the email - release it or block it.
Does Mimecast scan internal emails?
No, Mimecast only scans emails sent from outside of the corporate email service (eg internet mail).
How long do emails get quarantined for?
All quarantined emails will be held for 14 calendar days. During this time, you must decide whether to release or block them. After 14 days the system will automatically delete them, but you can view 'on hold' messages by going to the Mimecast tab in Outlook and clicking On Hold Messages then Personal On Hold.
If quarantined emails get deleted, can you get them back for me?
No, they are permanently removed from the system.
What happens if someone is on leave/sick etc for longer than 14 days?
Any potential spam will still be deleted after 14 days.
Why should I delete emails from the quarantine?
This will help the system learn what is spam and so improve its accuracy. If you let the emails expire from the quarantine, the system will not learn from them.
Does this mean that you are reading all my emails?
No the system automatically scans the emails for content, no-one reads individual emails.
Why do I still receive Spam - shouldn't Mimecast prevent it from reaching me?
Mimecast removes about 90% of unwanted mail which no one sees. About 5% is then quarantined and 5% sadly does slip though. It is an ongoing battle to try to prevent SPAM from getting through because SPAM is on the increase and the people that send it are constantly trying to find ways to get around the system. The way the SPAM filter works, is that it checks the email for its content and then gives the email a score. Based on the score it is given, it determines if the email should be blocked or not. Some of the ways the ‘Spammers’ are getting around this, is by, constantly changing the send from address that they are using, splitting up the words that they know will get checked e.g. V.I.A.G.R.A., or even copying the text into a picture so that it is not read as text.
Also, because SPAM is dealt with corporately, if an email is picked up by Mimecast and you delete the email, the score for that email will be increased. If other people in HCC get the same email and release it, it will counteract what you have done and reduce the score.
How does Mimecast work out what is potential spam?
Mimecast uses a variety of rules, such as checking against senders email addresses, specific content, (words, URL’s etc.), senders domain address, if the sender address has been spoofed, if the email has been sent to multiple recipients. It is continually updating what it rates against, and IT are able to add specific rules if it is found that specific items of unwanted spam are still getting through.
Will our emails be checked for viruses?
Yes. All email goes through an Anti Virus check. Any infected attachments will be stripped out. Any non-infected attachments will not be scanned by the Mimecast spam filters though, only message body text and email title.
How many quarantine notices should I receive per day?
Quarantine notifications are sent regularly (four times a day Monday-Friday and twice daily Saturday and Sunday).
If I release an email that has been quarantined, how long before it appears in my inbox?
It should arrive in your inbox soon after you release it, but please allow at least 30 minutes for this to happen.
I have blocked a message and it has disappeared?
If you have blocked a message it will be moved to your Junk E-mail folder in Outlook. Open this folder to view the blocked email.
What do I do if I receive an email which contains “inappropriate” language/content?
If it is really offensive, contact the Help Desk to have a call raised. This will be filtered ASAP.
Can I create a bookmark/favourite in my web browser for my quarantine list?
No. The link in the Quarantine Notification email expires after 14 days so it is not practicable to do this.
Why can't I use the Junk email facility in Outlook?
We cannot use this facility in Outlook because of the way that Outlook is set up for us corporately. Because of this, a corporate decision was been made to only use Mimecast and the Outlook facility has been disabled.
I don’t work at a school but have an HCC POP3/mail account -will I be included on the system?
Yes and you will also receive quarantine notices.
Children's Services FAQs
I work at a school and have an Office 365 account - will I get spam notifications?
Yes all corporate users will receive email quarantine notifications, this includes school Office 365 users.
I work in a school and have an HCC POP3/mail e-mail account - will I be included in this system?
Yes all POP3/mail users are put onto Mimecast. Please note you will not receive quarantine notices. This is because the system has no way of knowing whether an email address is for an adult or a child, and is to prevent children from releasing unsuitable emails. The system will automatically delete them after the required period.
We have our own mail server - will I receive quarantine notices?
No. Your emails will still be filtered for spam but you won’t receive notifications.
Can I report SPAM from an Office 365 or @Mail service?
It is currently not possible to report or send any spam received within Office 365 or @Mail. If you receive SPAM, simply delete it.