5 General Configuration
2. Enter the Notification subject
5.6.1 List of Notification Variables
The notification variables listed in the following table may be used in the notifica-tion texts and notificanotifica-tion subject lines. Simply insert the desired variables as necessary.
In certain cases, it may be more appropriate not to display individual rows of the notification template, for example, if a cellular phone number has not been ente-red for all users in the Active Directory. You can use the [COND] conditional vari-able in these cases by manually entering it in the source text of any notification template. Refer to “[COND] variable:” on page 360.
Category,
Recipients of the email that triggered the action who were defined in the address conditions.
General: Date [VAR]DateOnly[/VAR] Date on which the job that started the action was processed.
General: Date and Time
[VAR]Date[/VAR] Date and time at which the job that started the action was processed.
General: ID of a qua-rantined email
[VAR]QuarantineDo-cRef[/VAR]
Unique identifier of the quarantined email.
General: Invalid recipi-ents
[VAR]UnrestrictedRecipients [/VAR]
Recipients of the email that triggered the action who were not defined in the address conditions.
General: iQ.Suite Report
[VAR]ToolReport[/VAR] Summary of the scan results.
General: iQ.Suite Report (details)
[VAR]ToolReportDetails[/VAR] Scan results with all details.
General: Job name [VAR]Jobname[/VAR] Name of the job that started the action.
General: Message ID [VAR]MsgID[/VAR] ID of the email.
GENERAL CONFIGURATION - CREATING NOTIFICATION TEMPLATESGeneral: Number of recipients
[VAR]NumberRecipient[/VAR] Number of recipients to which the email is addressed.
General: Quarantine folder
[VAR]Quarantine[/VAR] The quarantine in which an email was stored.
General: Recipient(s) [VAR]Recipients[/VAR] Recipients of the email that triggered the action.
General: Sender [VAR]Mailsender[/VAR] Sender of the email that triggered the action.
General: Sender (SMTP)
[VAR]From[/VAR] Sender SMTP of the email that trig-gered the action.
General: Server [VAR]Server[/VAR] Server through which the affected email was sent (the name entered in the configuration settings).
General: Server (net-work name)
[VAR]ServerFQDN[/VAR] Server through which the affected email was sent (the server’s network name – Fully Qualified Domain Name).
General: Subject [VAR]Subject[/VAR] Subject line of the email that trigge-red the action.
General: Time [VAR]TimeOnly[/VAR] Time at which the job that started the action was processed.
iQ.Suite Convert Convert: Name of the converted attachment
[VAR]AttachmentName[/VAR] Name of the converted file attach-ment; in form of a list for multiple attachments.
Convert: Size diffe-rence of the converted attachment (in %)
[VAR]SizeDeltasPerc[/VAR] Size difference of the converted file attachment (in %); in form of a list for multiple attachments.
Convert: Size diffe-rence of the converted attachment (in KB)
[VAR]SizeDeltasKB[/VAR] Size difference of the converted file attachment (in KB); in form of a list for multiple attachments.
Category, type of variable
Variable Description
Convert: Size of the converted attachment (in bytes)
[VAR]AttachmentSize[/VAR] Size of the converted file attachment prior to conversion (in bytes); in form of a list for multiple attachments.
Convert: Size of the converted attachment (in KB)
[VAR]AttachmentSize KB[/VAR]
Size of the converted file attachment prior to conversion (in KB); in form of a list for multiple attachments.
Convert: Total num-ber of converted attachments
[VAR]ConvertedCount[/VAR] Total number of converted file attach-ments.
Convert: Total size dif-ference of the conver-ted attachments (in KB)
[VAR]SizeDeltaSumKB[/VAR] Total size difference of the converted file attachments of this email (in KB).
Convert: Total size dif-ference of the original email (in KB)
[VAR]MailSizeDeltaKB[/VAR] Total size difference or the original email following conversion (in KB).
Convert: Total size of the converted attach-ments (in bytes)
[VAR]AttachmentSize Sum[/VAR]
Total size of the converted file attach-ments prior to conversion (in bytes).
Convert: Total size of the converted attach-ments (in KB)
[VAR]AttachmentSize SumKB[/VAR]
Total size of the converted file attach-ments prior to conversion (in KB).
iQ.Suite Watchdog Watchdog: Attach-ment name
[VAR]AttachmentName[/VAR] Names of the denied/infected file attachments.
Watchdog: Attach-ment size
[VAR]AttachmentSize[/VAR] Size of the denied/infected file attachment.
Watchdog: Attach-ment type
[VAR]FingerprintName[/VAR] Name of the denied file type.
Watchdog: Email size [VAR]MessageSize[/VAR] Overall size of the email.
Watchdog: Email size limit
[VAR]SetSizeLimit[/VAR] Maximum email size specified in the job.
Category, type of variable
Variable Description
GENERAL CONFIGURATION - CREATING NOTIFICATION TEMPLATESWatchdog: Finger-print category
[VAR]Fingerprintcate-gory[/VAR]
Category of the denied file type.
Watchdog: Virus name
[VAR]Virusname[/VAR] Names of the viruses found.
Watchdog: Virus scan-ner
[VAR]virusscanner[/VAR] Names of the scan engines that have found the viruses.
Information Store Scan
IS-Scan: Database [VAR]VSAPI_Database[/VAR] Name of the Information Store where the email was located at the time of the virus scan.
IS-Scan: Database URL
[VAR]VSAPI_Url[/VAR] URL of the Information Store where the email was located at the time of the virus scan.
IS-Scan: Delivery time [VAR]VSAPI_DeliveryTime [/VAR]
Date and time at which the email was delivered.
IS-Scan: Error description
[VAR]VSAPI_ErrorText[/VAR] Description of an error caused by the Information Store job.
IS-Scan: Folder [VAR]VSAPI_Folder[/VAR] Name of the Information Store folder where the email was located at the time of the virus scan.
IS-Scan: Mailbox [VAR]VSAPI_Mailbox[/VAR] Name of the owner of the mailbox where the email was located at the time of the virus scan.
IS-Scan: Message URL
[VAR]VSAPI_MessageUrl [/VAR]
Information Store URL of the email at the time of the virus scan.
IS-Scan: Server [VAR]VSAPI_Server[/VAR] Name of the server on which the virus scan was performed through the Information Store scan.
IS-Scan: Submit time [VAR]VSAPI_SubmitTime [/VAR]
Date and time at which the email was sent.
IS-Scan: Virus name [VAR]virusname[/VAR] Names of the viruses found.
Category, type of variable
Variable Description
IS-Scan: Virus scan-ner
[VAR]virusscanner[/VAR] Names of the scan engines that have found the viruses.
iQ.Suite Wall
iQ.Suite Wall - Content filtering
Wall: Content che-cking details
[VAR]DeniedContent-TabHTML[/VAR]
Detailed information on the words/sentences found.
Wall: Denied dictio-naries
[VAR]DeniedWordlists[/VAR] Dictionaries triggering the action, value/threshold reached.
Wall: Denied words [VAR]DeniedWord[/VAR] Word triggering the action, value/threshold reached.
Wall: Mail part [VAR]DeniedMailParts[/VAR] Attachments/message bodies causing the action.
iQ.Suite Wall - Spam filtering Wall: CORE classifica-tion category
[VAR]CORECategory[/VAR] Category in which the email is placed (classified) by CORE. Example:
NON-SPAM, SPAM.
Wall: CORE classifica-tion result
[VAR]COREPrediction[/VAR] Precise value for categorizing emails.
Wall: SASI result [VAR]SASIAnalysis[/VAR] Return value of the SASI engine, after having checked the email for spam.
Wall: SCL result [VAR]SCLAnalysis[/VAR] Return value of the SCL probability level after having checked the email for spam.
Wall: Spam analysis details
[VAR]SpamRe-portHTML[/VAR]
Detailed information on each spam criterion.
Category, type of variable
Variable Description
GENERAL CONFIGURATION - CREATING NOTIFICATION TEMPLATESWall: Spam level [VAR]SpamLevel[/VAR] iQ.Suite Wall adds a spam level in the form of an asterisk rating in steps of 10 in the header of each scanned email (e.g. X-SPAM-TAG: * indicates a spam probability between 0 and 10, X-SPAM-TAG: *** a probability between 20 and 30). You can define a rule that looks for this string in the Outlook message header and applies actions to emails with more than a certain number of asterisksa.
Wall: Spam probability [VAR]SpamValue[/VAR] Calculated spam probability value (from 0 to 100). This value is compa-red with the individually defined threshold values in the advanced spam filtering job.
iQ.Suite Wall - Address Filtering
Wall: Max. number of recipients
[VAR]SetRecipientLimit[/VAR] The maximum number of recipients defined in the job.
Wall: Restricted recipi-ents
[VAR]DeniedRecipient[/VAR] Names of the recipients who have triggered an action.
Wall: Restricted sen-ders
[VAR]DeniedSender[/VAR] Names of the senders who have trig-gered an action.
iQ.Suite Wall - Quarantine summary notification
Summary: Current summary report date
[VAR]Nowdate[/VAR] Date at which the current summary notification was generated.
Summary: Current summary report date and time
[VAR]Now[/VAR] Date and time at which the current summary notification was generated.
Summary: Current summary report time
[VAR]Nowtime[/VAR] Time at which the current summary notification was generated.
Category, type of variable
Variable Description
Summary: Fully quali-fied domain name
[VAR]FQDN[/VAR] Full domain name of the server on which the quarantine for which a notifications to be generated is loca-ted.
Summary: HTTP port [VAR]HTTPPort[/VAR] Port of the HTTP server.
Summary: HTTP ser-ver
[VAR]HTTPServer[/VAR] HTTP server through which HTTP user requests are sent.
Summary: Last sum-mary report date
[VAR]Lastdate[/VAR] Date at which the previous summary notification was generated.
Summary: Last sum-mary report date and time
[VAR]Last[/VAR] Date and time at which the previous summary notification was generated.
Summary: Last sum-mary report time
[VAR]Lasttime[/VAR] Time at which the previous summary notification was generated.
Summary: List of qua-rantined emails
[VAR]HtmlList[/VAR] Complete list of all quarantined items for a recipient with HTML formatting (compulsory field in the quarantine summary notification).
Summary: Quarantine [VAR]Displayname[/VAR] Name of the quarantine from where the email list was generated.
Summary: Recipients [VAR]RcptTo[/VAR] Recipients of the summary notifica-tion.
Creates an additional link in the sum-mary notification. Users can manu-ally request an intermediate report of their summary notification by email.
Summary: Request follow-up summary via HTTP
[VAR]Link::HTTP_SendRecen tlyAdded[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally request an intermediate report of their summary notification via HTTP.
Category, type of variable
Variable Description
GENERAL CONFIGURATION - CREATING NOTIFICATION TEMPLATESSummary: Reply to [VAR]ReplyTo[/VAR] Address to which replies to the sum-mary notification are to be sent (Noti-ficationReplyTo).
Summary: Sender [VAR]From[/VAR] Sender of the summary notification.
Summary: Server [VAR]Server[/VAR] Short name of the server where the quarantine is located for which a notification is to be generated.
Summary: Subject [VAR]Subject[/VAR] Subject of the summary notification.
iQ.Suite Wall - Collective notifications
Collective notification:
list of notifications
[VAR]NotificationList[/VAR] HTML list of all notifications (Body), separated by dashes.
Collective notification:
table of contents
[VAR]TOCList[/VAR] Numbered HTML list of all notifica-tions (Subject). Each entry in the list has a link to the corresponding entry in the notification list ("Notification-List" variable).
Creates an additional link in the sum-mary notification. Users can manu-ally delete a whitelist by email (all entries are removed).
Whitelist: Clear white-list by web
[VAR]link::HTTP_ClearWhiteli s[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally delete a whitelist via HTTP (all entries are removed).
Whitelist: Send white-list by email
[VAR]link::MAIL_SendWhitelis t[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally request a whitelist by email.
Whitelist: Send white-list by web
[VAR]link::HTTP_SendWhiteli st[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally request a whitelist via HTTP.
iQ.Suite Wall - Blacklist Category,
type of variable
Variable Description
Blacklist: Clear black-list by email
[VAR]link::MAIL_ClearBlacklis t[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally delete a blacklist by email (all entries are removed).
Blacklist: Clear black-list by web
[VAR]link::HTTP_ClearBlackli st[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally delete a blacklist via HTTP (all entries are removed).
Blacklist: Send black-list by email
[VAR]link::MAIL_SendBlacklis t[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally request a blacklist by email.
Blacklist: Send black-list by web
[VAR]link::HTTP_SendBlackli st[/VAR]
Creates an additional link in the sum-mary notification. Users can manu-ally request a blacklist via HTTP.
iQ.Suite Crypt
Crypt: Analysis results [VAR]Crypt_Security[/VAR] Displays the Crypt mode used and its result (email has not been encryp-ted or decrypencryp-ted, etc.).
Crypt: Crypt Engine [VAR]Crypt_Engine[/VAR] Name of the selected Crypt engine.
Crypt: Crypt method [VAR]Crypt_Method[/VAR] Name of encryption method (PGP, S/MIME or PGP/MIME).
Crypt: Crypt mode [VAR]Crypt_Handling[/VAR] Job security settings: encrypt, sign, encrypt and sign.
Crypt: Number of imported keys
[VAR]Crypt_NumberImported[
/VAR]
Number of imported keys (the email sections from which the keys were imported are counted).
Crypt: Recipients pro-cessed
[VAR]Crypt_AffectedRecipient s[/VAR]
Recipients for whom a Crypt action has been executed.
WebCrypt Pro: Error code
[VAR]Crypt_ErrorCode[/VAR] Error code returned in case of an error. Error numbers between 1 and 20 refer to errors of the WebCrypt Pro server.
Category, type of variable
Variable Description
GENERAL CONFIGURATION - CREATING NOTIFICATION TEMPLATESiQ.Suite Bridge
Bridge: Connector [VAR]Bridge_Engine[/VAR] Display name of the Bridge connec-tor defined under ‘Utilities’ (from the configuration of the Bridge job).
Bridge: Error code [VAR]Bridge_ErrorCode[/VAR ]
Error code returned by Bridge in case of an error, e.g. when no con-nection to the Bridge Connector can be established.
Bridge: Error descrip-tion
[VAR]Bridge_ErrorDescription [/VAR]
Error description returned by Bridge in case of an error, e.g. when no con-nection to the Bridge Connector can be established.
iQ.Suite Store (archive)
Store Archiving: ID [VAR]Archive_ID[/VAR] ID (in archive) of the email archived with success.
Store Archiving:
Engine
[VAR]Archive_Engine[/VAR] Display name of the archiving engine, set under ‘Utilities’ (from configuration of the Store job).
Store Archiving:
Error code
[VAR]Archive_ErrorCode[/VA R]
Error code returned by the archive interface in case of an error.
Store Archiving: Error description
[VAR]Archive_ErrorDescriptio n[/VAR]
Error description returned by the archive interface in case of an error.
Store Archiving: Size (in bytes)
[VAR]Archive_Size[/VAR] Number of archived bytes (total of all exported emails).
Store Archiving: Time (in seconds)
[VAR]Archive_Time[/VAR] Time in seconds needed for archi-ving.
Userlist: Entries [VAR]HtmlList[/VAR] Complete list of all entries for the corresponding recipient with HTML formatting (compulsory field in the blacklist/whitelist notification).
Category, type of variable
Variable Description
Userlist: Fully Quali-fied Domain Name
[VAR]FQDN[/VAR] Full network name of the server hos-ting the blacklist/whitelist for which the summary notifications are gene-rated.
Userlist: HTTP Port [VAR]HTTPPort[/VAR] Port of the HTTP server.
Userlist: HTTP Server [VAR]HTTPServer[/VAR] HTTP server through which HTTP user requests are sent.
Userlist: Name [VAR]Displayname[/VAR] Name of the blacklist/whitelist used to generate the list of emails.
Userlist: Number [VAR]SummaryPart[/VAR] If more than 3 000 new entries are listed in a blacklist/whitelist, the user receives several blacklist/whitelist notifications. The variable returns the consecutive number of the notifica-tion ("1" for the first 3 000 entries, "2"
for the next 3 000, etc.).
Userlist: Number of entries
[VAR]CollectedSize[/VAR] Total size of the blacklist/whitelist notification.
Userlist: Recipients [VAR]RcptTo[/VAR] Recipients of the blacklist/whitelist notification.
Userlist: Reply address
[VAR]ReplyTo[/VAR] Address to which the replies to the blacklist/whitelist notifications are to be sent (NotificationReplyTo).
Uselist: Sender [VAR]From[/VAR] Sender of the blacklist/whitelist notifi-cation.
Userlist: Server [VAR]Server[/VAR] Short name of the server hosting the blacklist/whitelist for which the notifi-cations are generated.
Userlist: Subject [VAR]Subject[/VAR] Subject of the blacklist/whitelist noti-fication.
a. For further Information on creating rules in Outlook, please refer to the Outlook help.
Category, type of variable
Variable Description
GENERAL CONFIGURATION - CREATINGA DATABASE CONNECTIONTOAN SQL SERVERFor further Information on options and syntax of the variables, please refer to
“Copy the Attach Sender Signature job to MAIL TRANSPORT JOBS. Activate the job.” on page 375.