Symantec 10744983 - Mail Security 8320, Руководство администратора

Страница: 96 / 249

7
Select the desired action.
See Table 4-2 on page 72.
For some actions you need to specify additional information in fields that
appear below the action.
When using the Save to disk action on Solaris, Linux, or Windows, you must
specify a writeable directory.
8
Click Add Action.
9 If desired, add more actions.
See Table 4-3 on page 79.
10
Click Save.
Determining your suspicious attachment policy
When you choose the condition, “If a message contains a suspicious attachment,”
two additional actions become available:
■
Hold message in Suspect Virus Quarantine
■
Strip and hold in Suspect Virus Quarantine
Both of these actions enable you to make use of the Suspect Virus Quarantine to
delay filtering these messages until a later time, when updated virus definitions
may be available. This provides enhanced protection against new and emerging
virus threats.
By default, these messages are held in the Suspect Virus Quarantine for 6 hours.
You can vary the number of hours on the Settings > Quarantine page, Virus tab.
Changing default virus actions
By default, attachments containing viruses are cleaned. Inbound or outbound
messages containing a mass-mailing worm, unscannable messages, or malformed
MIME messages are deleted. You may want to change the default setting for
unscannable messages if you are concerned about losing important messages.
Creating spam policies
Using the Spam Policies page, you can add, edit, copy, delete, and enable or disable
spam policies.
To add a spam policy
1
In the Control Center, click Policies > Spam.
2 Click Add.
Configuring email filtering
Creating virus, spam, and compliance filter policies
96