Specifying Actions for "Virus" Rules Main Actions Parent topic

Main Actions allow you to specify the default actions that IMSVA takes when messages match the scanning conditions specified in Step 2: Scanning Conditions.
Note
Note
If a message is detected by ATSE and if Deep Discovery Advisor is enabled, IMSVA performs the specified actions and sends a copy of the message to Deep Discovery Advisor for further analysis.

Procedure

  1. Under Intercept, click the radio button next to one of the following:

    Intercept Settings

    Setting
    Description
    Do not intercept messages
    This specific rule does not intercept messages. If there are other rules, IMSVA will process the message. If there are no rules, IMSVA passes the message to your network.
    Delete entire message
    Deletes the message and all attachments.
    Quarantine
    IMSVA puts the message and its attachments into the quarantine area that you select from the drop-down box. For instructions on creating a new quarantine area, see Configuring Quarantine and Archive Settings.
    Change recipient
    IMSVA sends the message to another recipient. Specify the recipient email address and separate multiple recipients with a semicolon (;).
    Handoff
    IMSVA hands off the message to a specific mail server. Select Handoff if you have a secure messaging server on your network that can process or handle the message. Configure the following:
    • Next to Host, specify the FQDN or IP address of the mail server.
    • Next to Port, specify the port number through which the mail server receives email traffic.
    Note
    Note
    IMSVA can only track a message before it is handed off. After the handoff, the message is not traceable anymore as it is no longer within the control of IMSVA.
  2. Under Modify, select the check boxes next to any of the following:
    Note
    Note
    Options under If IMSVA finds a virus are only available for Antivirus rules.
    • If IMSVA finds a virus: Select the check box to enable actions if IMSVA finds a virus or other malware, and then click one of the following:

      IMSVA Finds a Virus Settings

      Setting
      Description
      Use ActiveAction
      Enable IMSVA to automatically use pre-configured scan actions for specific types of viruses/malware.
      Attempt to clean attachments. If unable to clean
      Select an action for IMSVA to take if it cannot clean the attachment:
      • Delete matching attachment: Remove only the attachments with viruses/malware.
      • Delete all attachments: Remove all attachments.
      Delete attachments
      Select an action for IMSVA to take:
      • Delete matching attachment: Remove only the attachment with viruses/malware.
      • Delete all attachments: Remove all attachments.
    • Insert X-header: Inserts a user-specified message to the header of messages.
      Note
      Note
      If you configure multiple rules to add an x-header, the X-header appears only once in the message. The X-header appears as configured in the last rule.
    • Insert stamp in body: Insert text at the beginning or end of the message. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.
    • Insert safe stamp for clean mails: Insert text into clean messages signifying that the message is safe. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.
      Note
      Note
      The Insert safe stamp for clean mails option is not available on the Special Viruses tab.
    • Tag subject: Add text to the subject line of the message. Click Tag subject to edit the tag.
    • Postpone delivery time: Delay delivery until a specified hour of the day. Select the hour of the day and minutes from the drop-down boxes.
  3. Under Monitor, select the check boxes next to any of the following:
    • Send policy notifications: Send an message to one or more recipients. To select a type of notification, click Send policy notifications. For instructions on creating notifications, see Using the Notifications List.
    • Archive modified to: Archive the message to an archive area. For instructions on creating a new archive area, see Configuring Quarantine and Archive Settings.
    • BCC: Blind carbon copy the message to another recipient. Specify the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient.