Email Protection Administrator Guide
Configure a Content Filter
November 2012
Proprietary: Not for use or disclosure outside McAfee without written permission
57
For example,
refi*d
would catch
refinanced
, but would also catch
refinishing
is a great way to save
d
.
— If the literal asterisk or question mark is desired, it must be preceded by a
backslash (for example,
\*
or
\?
).
For example,
why\?
(without quotes) would catch the string
why?
and the
question mark would not be used as a wildcard.
Caution:
It is possible to create wildcard combinations that will filter valid email,
including all email, and/or will substantially slow email processing. Be very careful if you
use wildcards to ensure that only the desired content is filtered.
4
From the
Action
drop-down menu, select an action to take if an email matches a
keyword:
•
None
– The email is forwarded to the recipient email address.
•
Quarantine the message
– The email is sent to the recipient's domain content
quarantine area.
•
Deny Delivery
– The email is denied delivery.
•
Allow –
The email is sent to the recipient email address.
Note:
The Allow option is useful if you want to override standard Email Protection spam content
filtering for particular keywords.
Note:
Emails that match keywords but are allowed will be reported as
Other
in the
Threats: Spam
report.
•
Tag the message subject with "[SPAM]"
– The phrase "[SPAM]" is added to the
subject line of the email at the beginning of the subject text and the email is sent to the
recipient email address.
•
Encrypt Message
– is also available for Outbound content groups, if the Customer
has subscribed to Encryption.
•
Silent Copy
– allows you to forward a copy of the original message. To send a copy,
select a predefined distribution list from the drop-down.
5
Click the
Enable
checkbox to turn on the spam content group.
6
Click
Save
for the new spam content group.
7
Click
Save
for the policy or continue to the
Notifications
tab.
Notify Users about Spam Content
You can direct Email Protection to send notification emails to the recipient and/or sender
when an email is filtered because it contained spam content. You can see the content of
notifications and change it in the
Notifications
tabs. See Define the Format and Text of
Notifications to Users.
Note:
Virus notifications will
not
be sent out for emails that are infected with widespread
viruses or worms (for example, SoBig or MyDoom). These notifications will be
automatically disabled by the Email Protection.