McAfee SMEFCE-AI-DA Administration Guide - Page 65

Email Protection Administrator Guide Configure a Content Filter For example, refi*d would catch refinanced, but would also catch refinishing is a great way to save d. - If the literal asterisk or question mark is desired, it must be preceded by a backslash (for example, \* or \?). For example, why\? (without quotes) would catch the string why? and the question mark would not be used as a wildcard. Caution: It is possible to create wildcard combinations that will filter valid email, including all email, and/or will substantially slow email processing. Be very careful if you use wildcards to ensure that only the desired content is filtered. 4 From the Action drop-down menu, select an action to take if an email matches a keyword: • None - The email is forwarded to the recipient email address. • Quarantine the message - The email is sent to the recipient's domain content quarantine area. • Deny Delivery - The email is denied delivery. • Allow - The email is sent to the recipient email address. Note: The Allow option is useful if you want to override standard Email Protection spam content filtering for particular keywords. Note: Emails that match keywords but are allowed will be reported as Other in the Threats: Spam report. • Tag the message subject with "[SPAM]"- The phrase "[SPAM]" is added to the subject line of the email at the beginning of the subject text and the email is sent to the recipient email address. • Encrypt Message- is also available for Outbound content groups, if the Customer has subscribed to Encryption. • Silent Copy - allows you to forward a copy of the original message. To send a copy, select a predefined distribution list from the drop-down. 5 Click the Enable checkbox to turn on the spam content group. 6 Click Save for the new spam content group. 7 Click Save for the policy or continue to the Notifications tab. Notify Users about Spam Content You can direct Email Protection to send notification emails to the recipient and/or sender when an email is filtered because it contained spam content. You can see the content of notifications and change it in the Notifications tabs. See Define the Format and Text of Notifications to Users. Note: Virus notifications will not be sent out for emails that are infected with widespread viruses or worms (for example, SoBig or MyDoom). These notifications will be automatically disabled by the Email Protection. November 2012 Proprietary: Not for use or disclosure outside McAfee without written permission 57