Use these actions when you want to optimize
scanning for your environment.
Procedure
When you want to protect your Exchange
servers against a mass-mailing attack, select Enable
action on mass-mailing behavior and select the action
that ScanMail executes
whenever it detects a mass-mailing attack. This action overrides
any other action for ScanMail.
The real-time scanning default action is Delete entire message.
When you want to configure ScanMail to use the
same action against all detected security risks, select All
security risks and accept the default action or select
a customized action.
When you want to configure a ScanMail action for
each type of threat that ScanMail detects,
select each threat type individually and configure the action ScanMail executes when
it detects that threat type.