• Intercept : Allows you to choose whether you would like IMSS to intercept the messages and prevent them from reaching the recipients Choosing the intercept
4. Under Monitor , select the check boxes next to any of the following:
• Send policy notifications: Send an email message to one or more recipients. To select a type of notification, click Send policy notifications. For
instructions on creating notifications, see Using the Notifications List on page 3-21.
• Archive modified to: Archive the message to an archive area. For instructions on creating a new archive area, see Configuring Quarantine and Archive Settings on page 5-25.
• BCC: Blind carbon copy the message to another recipient. Type the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient.
Specify actions for "Virus" rules Main Actions:
Main Actions allow you to specify the default actions that IMSS takes when messages match the scanning conditions specified in Step 2: Scanning Conditions.
FIGURE3-3. Antivirus Rule Main Actions
• Do not intercept messages: This specific rule does not intercept messages. If there are other rules, IMSS will process the message. If there are no rules, IMSS passes the message to your network.
• Delete entire message: Deletes the message and all attachments.
• Quarantine: IMSS puts the message and its attachments into the quarantine area that you select from the drop down box. For instructions on creating a new quarantine area, see Configuring Quarantine and Archive Settings on page 5-25.
• Change recipient: IMSS sends the message to another recipient. Type the recipient email address and separate multiple recipients with a semicolon (;). • Handoff: IMSS hands off the message to a specific mail server. Select
Handoff if you have a secure messaging server on your network that can process or handle the message. Configure the following:
• Next to Host, type the FQDN or IP address of the mail server.
• Next to Port, type the port number through which the mail server receives email traffic.
Note: IMSS can only track a message before it is handed off. After the handoff, the message is not traceable anymore as it is no longer within the control of IMSS.
2. Under Modify, select the check boxes next to any of the following:
Note: Options under If IMSS finds a virus are only available for Antivirus rules. • If IMSS finds a virus: Select the check box to enable actions if IMSS finds a
virus or other malware, and then click one of the following:
• Use ActiveAction: Enable IMSS to automatically use preconfigured scan actions for specific types of viruses/malware.
• Attempt to clean attachments. If unable to clean: Select an action for IMSS to take if it cannot clean the attachment:
• Delete matching attachment: Remove only the attachments with viruses/malware.
• Delete attachments: Select an action for IMSS to take:
• Delete matching attachment: Remove only the attachment with viruses/malware.
• Delete all attachments: Remove all attachments.
• Insert X-header: Inserts a user-specified message to the header of email messages.
Note: If you configure multiple rules to add an x-header, the x-header appears only once in the message. The x-header appears as configured in last rule. • Insert stamp in body: Insert text at the beginning or end of the message.
From the drop down box, select the name of the stamp to insert or click Edit
to go to the Stamps screen and manage your stamps.
• Insert safe stamp for clean mails: Insert text into clean emails signifying that the email is safe. From the drop down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.
Note: The Insert safe stamp for clean mails option is not available on the Special Viruses tab.
• Tag subject: Add text to the subject line of the message. Click Tag subject to edit the tag.
• Postpone delivery time: Delay delivery until a specified hour of the day. Select the hour of the day and minutes from the drop down boxes.
3. Under Monitor, select the check boxes next to any of the following:
• Send policy notifications: Send an email message to one or more recipients. To select a type of notification, click Send policy notifications. For
instructions on creating notifications, see Using the Notifications List on page 3-21.
• Archive modified to: Archive the message to an archive area. For instructions on creating a new archive area, see Configuring Quarantine and Archive Settings on page 5-25.
• BCC: Blind carbon copy the message to another recipient. Type the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient. Specify actions for "Virus" rules Special Viruses:
Special Virus settings allow you to specify the actions that IMSS takes if the messages match any of the following criteria. The actions specified on this screen will override the default actions specified on the Main Actions tab.
Note: These options are only available for Antivirus rules.
• Mass mailing
: IMSS takes the actions specified in this section if it detects
mass mailing messages.• Spyware/grayware
: Allows you to specify the corresponding actions if you
have selected any of the Spyware/Grayware Scanning options on the Scanning Conditions screen in step 2. For more information, see Specifying Scanning Conditions on page 3-43. If IMSS detects spyware/grayware in a message, it takes the actions that are specified here.Note: IMSS takes the default action for messages matching the
Spyware/Grayware Scanning conditions if you do not select alternative actions.
• IntelliTrap
: Allows you to specify the corresponding actions if you have
selected the IntelliTrap Setting options on the Scanning Conditions screen in step 2. See Specifying Scanning Conditions on page 3-43.Note: IMSS takes the default action for messages matching the IntelliTrap conditions if you do not select alternative actions.