Views:
This section shows how to create content filtering rules to take actions on email messages that contain QR codes to protect against image-based QR code phishing attacks.

Procedure

  1. Configure a customized expression and type "(Yes)" in the Expression field.
    For more information, see Configuring a Customized Expression.
  2. Configure a content filtering rule. For more information, see Configuring a Content Filtering Rule.
  3. For the content filtering rule, specify the following settings in the Content section:
    1. From the Message section drop-down list, select Header.
    2. For Message header, select Other and type "X-DDEI-QR-Code-Result" in the text field.
    3. From the View drop-down list, select Customized expression.
    4. From the Available Keyword List & Expression list, select the expression you have created in Step 1 and add it to the Selected Keyword List & Expression list.
    5. Click Save.
  4. Include the content policy rule in an active policy.
    For more information, see Configuring a Policy.