Adding a Content Filtering Rule for All Matching Conditions

This rule type is not available for Manual and Scheduled Content Filtering Scans.

  1. Navigate to Security Settings.
  2. Select a Messaging Security Agent.
  3. Click Configure Settings.

    A new screen appears.

  4. Click Content Filtering.

    A new screen appears.

  5. Click Add.

    A new screen appears.

  6. Select Filter message that match all conditions defined.
  7. Click Next.
  8. Type the name of your rule in the Rule name field.
  9. Select the message part that you want to filter for undesirable content. The Messaging Security Agent can filter email messages by:

    • Header (From, To, and Cc)

    • Subject

    • Size of message body or attachment

    • Attachment file name

    Note:

    The Messaging Security Agent only supports filtering of header and subject content during real-time scan.

  10. Click Next.
  11. Select an action for the Messaging Security Agent to take when it detects undesirable content. The Messaging Security Agent can perform the following actions (For descriptions, see Scan Targets and Actions for Messaging Security Agents):

    • Replace with text/file

      Note:

      You cannot replace text from the From, To, Cc, or subject fields.

    • Quarantine entire message

    • Quarantine message part

    • Delete entire message

    • Archive

    • Pass entire message

  12. Select Notify recipients to set the Messaging Security Agent to notify the intended recipients of email messages that had content filtered.

    Select Do not notify external recipients to only send notifications to internal mail recipients. Define internal addresses from Operations > Notification Settings > Internal Mail Definition.

  13. Select Notify senders to set the Messaging Security Agent to notify the senders of email messages that had content filtered.

    Select Do not notify external senders to only send notifications to internal mail senders. Define internal addresses from Operations > Notification Settings > Internal Mail Definition.

  14. In the Advanced Options section, click the plus (+) icon to expand the Archive Setting subsection.
    1. In the Quarantine directory field, type the path to the folder for Content Filtering to place quarantined email or accept the default value: <Messaging Security Agent Installation folder>\storage\quarantine
    2. In the Archive directory field, type the path to the folder for Content Filtering to place archived email or accept the default value: <Messaging Security Agent Installation folder>\storage\backup for content filter
  15. Click the plus (+) icon to expand the Replacement Settings subsection.
    1. In the Replacement file name field, type the name of the file that Content Filtering will replace an email message with when a rule using the “Replace with text/file” action is triggered, or accept the default value.
    2. In the Replacement text field, type or paste the content of the replacement text for Content Filtering to use when an email message triggers a rule whose action is “Replace with text/file” or accept the default text.
  16. Click Finish.

    The wizard closes and returns to the Content Filtering screen.

Parent topic: Content Filtering