actions_virus_help

Specifying Actions

The main actions for both the Antivirus and Other rules are similar, although there are minor differences in the options listed. Select the desired action(s) from the following categories:

• Intercept: Allows you to choose whether you would like IMSVA to intercept the messages and prevent them from reaching the recipients. Choosing the intercept option allows you to specify an action for IMSVA to take on intercepted messages.

• Modify: Instructs IMSVA to make some alterations to the messages or the attachments, such as inserting a stamp or tagging the subject.

• Monitor: Instructs IMSVA to send a notification, archive or blind copy the messages if you would like to further analyze them.

To set the actions:

1. Click Next from the Step 2: Select Scanning Conditions screen. The Step 3: Select Actions screen appears.

• The screen that appears in this step depends on the type of rule that you are creating. The antivirus rule contains two tabs that allow you to configure the main actions and the actions for special viruses.

Specify actions for "Other" rules:

Other Rule Actions

1. Under Intercept, click the radio button next to one of the following:

• Do not intercept messages: This specific rule does not intercept messages. If there are other rules, IMSVA will process the message. If there are no rules, IMSVA passes the message to your network.

• Delete entire message: Deletes the message and all attachments.

• Quarantine: IMSVA puts the message and its attachments into the quarantine area that you select from the drop-down box. For instructions on creating a new quarantine area, see Configuring Quarantine and Archive Settings.

• Change recipient: IMSVA sends the message to another recipient. Type the recipient email address and separate multiple recipients with a semicolon (;).

• Handoff: IMSVA hands off the message to a specific mail server. Select Handoff if you have a secure messaging server on your network that can process or handle the message. Configure the following:

• Next to Host, type the FQDN or IP address of the mail server.

• Next to Port, type the port number through which the mail server receives email traffic.

• IMSVA can only track a message before it is handed off. After the handoff, the message is not traceable anymore as it is no longer within the control of IMSVA.

2. Under Modify, select the check boxes next to any of the following:

• Insert X-header: Inserts a user-specified message to the header of email messages.

• Delete attachments: Select an action for IMSVA to take:

• Delete matching attachment: Remove only the attachment that matches the attachment scan condition.

• Delete all attachments: Remove all attachments.

• Insert stamp in body: Insert text at the beginning or end of the message. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.

• Tag subject: Add text to the subject line of the message. Click Tag subject to edit the tag.

• Postpone delivery to: Delay delivery until a specified hour of the day. Select the hour of the day and minutes from the drop-down boxes.

• Encrypt message: Encrypt the message and send the message to the recipient.

3. Under Monitor, select the check boxes next to any of the following:

• Send policy notifications: Send an email message to one or more recipients. To select a type of notification, click Send policy notifications. For instructions on creating notifications, see Using the Notifications List.

• Archive modified to: Archive the message to an archive area. For instructions on creating a new archive area, see Configuring Quarantine and Archive Settings.

• BCC: Blind carbon copy the message to another recipient. Type the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient.

Specify actions for "Virus" rules Main Actions:

Main Actions allow you to specify the default actions that IMSVA takes when messages match the scanning conditions specified in Step 2: Scanning Conditions.

1. Under Intercept, click the radio button next to one of the following:

Intercept Settings

Setting	Description
Do not intercept messages	This specific rule does not intercept messages. If there are other rules, IMSVA will process the mes­sage. If there are no rules, IMSVA passes the mes­sage to your network.
Delete entire mes­sage	Deletes the message and all attachments.
Quarantine	IMSVA puts the message and its attachments into the quarantine area that you select from the drop-down box. For instructions on creating a new quarantine area, see Configuring Quarantine and Archive Settings.
Change recipient	IMSVA sends the message to another recipient. Type the recipient email address and separate multiple recipients with a semicolon (;).
Handoff	IMSVA hands off the message to a specific mail server. Select Handoff if you have a secure mes­saging server on your network that can process or handle the message. Configure the following: Next to Host, type the FQDN or IP address of the mail server. Next to Port, type the port number through which the mail server receives email traffic. IMSVA can only track a message before it is handed off. After the handoff, the message is not traceable anymore as it is no longer within the control of IMSVA

2. Under Modify, select the check boxes next to any of the following:

• Options under If IMSVA finds a virus are only available for Antivirus rules.

• If IMSVA finds a virus: Select the check box to enable actions if IMSVA finds a virus or other malware, and then click one of the following:

IMSVA Finds a Virus Settings

Setting	Description
Use ActiveAction	Enable IMSVA to automatically use pre-configured scan actions for specific types of viruses/malware.
Attempt to clean attachments. If unable to clean	Select an action for IMSVA to take if it cannot clean the attachment: Delete matching attachment: Remove only the attachments with viruses/malware. Delete all attachments: Remove all attachments.
Delete attachments	Select an action for IMSVA to take: Delete matching attachment: Remove only the attachment with viruses/malware. Delete all attachments: Remove all attachments.

• Insert X-header: Inserts a user-specified message to the header of email messages.

• If you configure multiple rules to add an x-header, the X-header appears only once in the message. The X-header appears as configured in the last rule.

• Insert stamp in body: Insert text at the beginning or end of the message. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.

• Insert safe stamp for clean mails: Insert text into clean emails signifying that the email is safe. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.

• The Insert safe stamp for clean mails option is not available on the Special Viruses tab.

• Tag subject: Add text to the subject line of the message. Click Tag subject to edit the tag.

• Postpone delivery time: Delay delivery until a specified hour of the day. Select the hour of the day and minutes from the drop-down boxes.

3. Under Monitor, select the check boxes next to any of the following:

• Send policy notifications: Send an email message to one or more recipients. To select a type of notification, click Send policy notifications. For instructions on creating notifications, see Using the Notifications List.

• Archive modified to: Archive the message to an archive area. For instructions on creating a new archive area, see Configuring Quarantine and Archive Settings.

• BCC: Blind carbon copy the message to another recipient. Type the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient.

Specify actions for "Virus" rules Special Viruses:

Special Virus settings allow you to specify the actions that IMSVA takes if the messages match any of the following criteria. The actions specified on this screen will override the default actions specified on the Main Actions tab.

• These options are only available for Antivirus rules.

• Mass mailing: IMSVA takes the actions specified in this section if it detects mass mailing messages.

• Spyware/grayware: Allows you to specify the corresponding actions if you have selected any of the Spyware/Grayware Scanning options on the Scanning Conditions screen in step 2. For more information, see Specifying Scanning Conditions. If IMSVA detects spyware/grayware in a message, it takes the actions that are specified here.

• IMSVA takes the default action for messages matching the Spyware/Grayware Scanning conditions if you do not select alternative actions.

• IntelliTrap: Allows you to specify the corresponding actions if you have selected the IntelliTrap Setting options on the Scanning Conditions screen in step 2. See Specifying Scanning Conditions.

• IMSVA takes the default action for messages matching the IntelliTrap conditions if you do not select alternative actions.

See also:

Managing Policies

Creating a Tag Subject