Using Customized Scan Actions

Procedure

• When you want to protect your Exchange servers against a mass-mailing attack, select Enable action on mass-mailing behavior and select the action that ScanMail executes whenever it detects a mass-mailing attack. This action overrides any other action for ScanMail. The real-time scanning default action is Delete entire message.
• When you want to configure ScanMail to use the same action against all detected security risks, select All security risks and accept the default action or select a customized action.
• When you want to configure a ScanMail action for each type of threat that ScanMail detects, select each threat type individually and configure the action ScanMail executes when it detects that threat type.