Prev | Current Page 190 | Next

Jesse Varsalone and Jan Kanclirz Jr.

"Microsoft Forefront Security Administration Guide"


By moving the fi le fi ltering to the Transport Scan Job, users will be able to send
e-mails, but they will be checked during transit. This allows for the message to be
fi ltered and for a notifi cation e-mail to be sent if confi gured. While this has the same
end effect as the message being fi ltered, the end user has a better experience.
When you confi gure fi le fi ltering you can do this based on extension, type, and
fi le size. This provides you with a large amount of fl exibility when confi guring the
fi le fi lters. It is recommended that you fi lter by fi le type wherever possible, as this
prevents people from changing a fi le extension to bypass the fi lter. An example of fi le
fi ltering will be provided in the confi guration section of this chapter.
Once you have planned your fi le fi ltering, you will need to plan any other fi ltering
methods you plan to use. If you need to check the body of the message for certain
phrases, this can be done using the Transport Scan Job. Also known as keyword fi ltering,
this fi lter provides more control than the content fi lter in FSE.
When you create a keyword fi lter you can confi gure logical operators. Logical
operators allow you to specify that multiple words have to be in the message body or
that words have to appear multiple times. Using this technique allows you to create
complex fi lters.
The fi nal set of fi lters you can create are content fi lters.


Pages:
178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202