You can create policies that filter email messages according to:
• Any of the conditions in your policy: Select Match any or apply to all and click Next.
• All of the conditions in your policy: Select Match all conditions and click Next.
• Any matches to the header of messages policy: Select Match any condition and click Next.
• Exception policies: Select Exception and click Next.
An example of how to create a policy that filters email messages for any condition in your policy:
Step 1: Select a Type of Policy
Step 2: Select Accounts (Senders/Recipients) Step 3: Specify Policy
Step 4: Configure the Action ScanMail Takes Against Content That Matches a Keyword Step 5: Configure the Notifications ScanMail Sends When it Takes an Action
Step 6: Configure the Name and Priority of the Policy
Step 1: Select a Type of Policy
To select a type of policy:
1. From the Content Filtering screen, click Add.
2. Select Match any or apply to all.
3. Click Next.
Step 2: Select Accounts (Senders/Recipients)
To configure specified accounts (senders/recipients) the policy scans:
1. Select From Specific Senders to any recipients or From any senders to Specific Recipients.
2. Click Specific Senders/Specific Recipients.
3. Select Specific Accounts on Select accounts screen.
4. Search and select AD Users/Groups/Contacts/Special Groups and add them to the Selected Accounts list.
5. Search and select AD Users/Groups/Contacts/Special Groups and add them to the Selected Accounts list on the Exclude accounts screen.
6. Click Save.
7. Click Next.
Step 3: Specify Policy
To specify the policy:
1. Click the message part to filter for undesirable content. ScanMail can filter email messages by header (From, To, and CC), subject, body, or attachment.
2. Select whether ScanMail filters content for any specified keywords or for all specified keywords.
• Any specified keywords tells ScanMail to take action against content that contains any of the keywords in the list.
• All specified keywords tells ScanMail to take action against content only when the content contains all of the keywords in the list.
3. Type or import keywords.
• Type a keyword in the space provided.
• Click Add to add it to the list of keywords that ScanMail checks when filtering content.
• Click Delete to remove keywords from the list.
Note: By default, ScanMail searches for exact matches of the keywords that you add.
• Click Import to import keyword lists.
When you import a keyword file, the imported keywords appear in the keyword list. The imported file must be a text (.txt) file. The imported keywords use the same format as they had in the text file. You can import keyword lists from previous versions of ScanMail. ScanMail imports the keywords and applies the same syntax as used in this version of ScanMail.
Note: Export keywords when the list is complete to keep a copy of keywords to use on other ScanMail servers or to import keywords in the future.
4. (Optional) Click Match case-sensitive to have ScanMail disregard words that do not match the keyword's case when filtering content.
5. (Optional) Configure a list of synonyms.
• Click Match synonym to have ScanMail consider all the synonyms of the keyword when filtering content.
• Click Show details next to Match synonym to display the list of synonyms.
When you select a keyword, all of the keyword’s synonyms display in the Synonyms to exclude list. Use the arrow keys to add and delete synonyms for each corresponding keyword.
6. Click Next
TABLE 5-8. Imported text file for content filtering
THEIMPORTEDTEXTFILECONTAINS: THEKEYWORDLISTDISPLAYS
win cash prize win cash prize
win cash prize
win cash prize
Step 4: Configure the Action ScanMail Takes Against Content That Matches a Keyword
To configure the action ScanMail takes against content that matches a keyword:
1. Select an action for ScanMail to take when it detects undesirable content. ScanMail can perform the following actions when it detects content that matches the policy conditions:
• Replace with text/file: ScanMail replaces the filtered content with a text file.
You cannot replace text from the From, To, CC, or subject fields
Note: ScanMail does not perform this action in Transport level scans when the violation is in the header/subject of the email message.
• Quarantine entire message: ScanMail moves the email message to the quarantine directory.
• Quarantine message part: ScanMail quarantines the message body or the attachment file of the message.
Note: ScanMail does not perform this action in Transport level scans when the violation is in the header/subject of the email message.
• Pass message part: Record violation event in the content filtering logs, but take no action on the message part. This does not apply to low priority policies.
• Delete entire message: ScanMail deletes the entire email message.
• Backup: ScanMail delivers backed up email messages to the intended recipient and keeps a copy of the message in the specified backup directory.
2. Select Notify to configure ScanMail to notify the designated individuals when it takes action against undesirable content. Select Do not notify for ScanMail to execute the actions, but not notify the designated individual.
3. Click Next.
Step 5: Configure the Notifications ScanMail Sends When it Takes an Action
To configure the notifications ScanMail sends when it takes an action:
1. Click on the check boxes corresponding to the people ScanMail will notify.
2. Click Show details to customize the notification for that recipient.
3. Select from the notification options.
4. Click the Notification tab. The Notification screen displays.
5. Select the check boxes corresponding to the people ScanMail will notify. Refer to Notifications for details.
6. Click Write to Windows event log to have ScanMail write the notification to a Windows event log.
7. Click Save.
Step 6: Configure the Name and Priority of the Policy
To enable content filtering policies:
1. Select Enable to enable this policy.
2. Type the name of your policy in the Policy name space.
3. Type the priority of your policy in the Priority space.
4. Click Save.