The Forbidden Lists and Forbidden Recipients features in SafeSend allow administrators to limit which distribution lists or specific recipients their users are permitted to send emails to.
Choose your SafeSend version below:
Web Add-in version 6.0 or above
In SafeSend v6.0 and higher, these settings are managed centrally within the SafeSend Web Console Policy interface, offering simpler configuration without needing to edit system files.
- From within the the SafeSend web console, navigate to Manage > Policies
- Select the desired policy, and select Forbidden from the top navigation bar
- Forbidden Recipients/Domains: Enter one forbidden domain or email address per line in the provided text field
- Forbidden Lists: Use the provided toggle to block emails sent to any recipient email address that is a distribution list
- Click Save

For complete details on SafeSend Web Add-in policies in version 6.0 or higher, navigate to: Web Add-in v6.0+ Policies.
Web Add-in version 5.5 or below
Forbidden Lists
The ForbiddenLists setting prevents users from being able to send email to any Outlook or Exchange distribution list.
- Navigate to the settings.json file within the SafeSend Web Add-in site folder and open it by right-clicking on the file to open it with Notepad or any other desired text/code editor
- Under the Advanced section header, look for the //ForbiddenLists setting; this is disabled by default
- To enable this feature:
- Uncomment "ForbiddenLists": true, by removing // at the front of the line
- Save and close the window when done or continue to Forbidden Recipients below

Forbidden Recipients
The ForbiddenRecipients setting prevents users from being able to send email to an included email address.
- Navigate to the settings.json file within the SafeSend Web Add-in site folder and open it by right-clicking on the file to open it with Notepad or any other desired text/code editor
- Under the Advanced section header, look for the //ForbiddenRecipients setting; this is disabled by default
- To enable this feature:
- Uncomment // "ForbiddenRecipients": [ "user1@email.example", "user2@email.example" ], by removing // at the front of the line
- Replace the example emails with the desired, individual email addresses you wish to blacklist
- Each email address should be separated with a comma, as seen in the example image below
- Save and close the window when done

Additional Steps
If you'd like to customize the popup message a user sees when they've attempted to email an address on the Forbidden lists:
- Navigate to the Localization.xlsx file within the SafeSend Web Add-in site folder and open it in Microsoft Excel or another spreadsheet application that supports .xlsx file extensions
- if the Protected View warning shows at the top, click Enable Editing
- Look for the following strings and edit as necessary:
- SS_StringForbiddenRecipient: This string determines the text on the popup window for an individual email address listed in the ForbiddenRecipient setting, a singular Outlook group, or a singular Exchange list
- SS_StringForbiddenRecipients: This string determines the text on the popup window for multiple email addresses listed in the ForbiddenRecipient setting, multiple Outlook groups, and/or multiple Exchange lists
- SS_StringForbiddenRecipientTitle: This string determines the title of the popup window for both of the above strings
- Save and close the spreadsheet when done
Important Note
Any changes made to Settings.json require the website to be restarted to take effect. This should be done outside of normal operating hours to avoid potential service interruptions.