Views:
Create a new expression for each word, phrase, or concept you want to filter. Alternatively, you can include multiple search criteria into a single compound expression.
Tip
Tip
Having too many conditions in a content filter often causes it to become unpredictably complex. Trend Micro recommends creating one or two expressions per content filter.
To create new expressions:
  1. From the content filter rule workspace, click Create New Expression. The New Expression screen appears.
  2. Type the expression (that is, word or phrase) you want to filter, connected by logical operators in the Definition section Expression field. Refer to the help section at the bottom of the New Expression screen for details on how to use logical operators.
    Note
    Note
    This version of SMD enables you to use Regular Expressions in your content filtering. For example, if you want to filter a specific Social Security Number or Bank Card, you can use .REG. and type:
    For SSN
    .REG.(00[1-9]|0[1-9][0-9]|[1-6][0-9][0-9]|7[0-3][0-3]|7[56][0-9]|77[0-2])[[:space:]|\.|\\|\||-]?\d{2}[[:space:]|\.|\\|\||-]?\d{4}
    For Visa, MC, Discover, Switch/Solo, and JCB
    .REG.(6011|5[1-5]\d{2}|4\d{3}|67\d{2})[[:space:]|\.|\\|\||-]?\d{4}[[:space:]|\.|\\|\||-]?\d{4}[[:space:]|\.|\\|\||-]?\d{4}
  3. Select Enable or Disable case sensitive matching.
  4. Click Save & Close.
Tip
Tip
Before enabling a new expression in a Mail Scan rule, always test it first to be sure there are no unexpected consequences and choose to Quarantine rather than Delete.
Keywords: rule condition,expressions,testing expressions,conditions