For Real-time Scan:
Devices > {Messaging Security Agent} > Configure Policy > Content Filtering
For Manual Scan:
Scans > Manual > {Expand Messaging Security Agent} > Content Filtering
For Scheduled Scan:
Scans > Scheduled > {Expand Messaging Security Agent} > Content Filtering
- Click Add.
A new screen appears.
- Select Filter message that match any condition defined.
- Click Next.
- Type the name of your rule in the Rule name field.
- Select the message part that you want to filter for undesirable
content. The Messaging Security Agent can filter email messages
by:
Header (From, To, and Cc)
Subject
Body
Attachment
Note:The Messaging Security Agent only supports filtering of header and subject content during real-time scan.
- Click Next.
- Add keywords for the target part that you want to filter
for undesirable content. For details on working with keywords, see Keywords.
- If necessary, select whether or not to make content filter case-sensitive.
- Import new keyword files from a .txt file as needed.
- Define a list of synonyms.
- Click Next.
- Select an action for the Messaging Security Agent to
take when it detects undesirable content. The Messaging Security
Agent can perform the following actions (For descriptions, see Scan Targets and Actions for Messaging Security Agents):
Replace with text/file
Note:You cannot replace text from the From, To, Cc, or subject fields.
Quarantine entire message
Quarantine message part
Delete entire message
Archive
- Select Notify recipients to set
the Messaging Security Agent to notify the intended recipients of
email messages that had content filtered.
Select Do not notify external recipients to only send notifications to internal mail recipients. Define internal addresses from Operations > Notification Settings > Internal Mail Definition.
- Select Notify senders to set the
Messaging Security Agent to notify the senders of email messages
that had content filtered.
Select Do not notify external senders to only send notifications to internal mail senders. Define internal addresses from Operations > Notification Settings > Internal Mail Definition.
- In the Advanced Options section,
click the plus (+) icon to expand the Archive Setting subsection.
- In the Quarantine directory field, type the path to the folder for Content Filtering to place quarantined email or accept the default value: <Messaging Security Agent Installation folder>\storage\quarantine
- In the Archive directory field, type the path to the folder for Content Filtering to place archived email or accept the default value: <Messaging Security Agent Installation folder>\storage\backup for content filter
- Click the plus (+) icon to expand the Replacement
Settings subsection.
- In the Replacement file name field, type the name of the file that Content Filtering will replace an email message with when a rule using the “Replace with text/file” action is triggered, or accept the default value.
- In the Replacement text field, type or paste the content of the replacement text for Content Filtering to use when an email message triggers a rule whose action is “Replace with text/file” or accept the default text.
- Click Finish.
The wizard closes and returns to the Content Filtering screen.