Prev | Current Page 221 | Next

Jesse Varsalone and Jan Kanclirz Jr.

"Microsoft Forefront Security Administration Guide"

These are (there must be a space between the word and the underscore):
?–  word1_AND_word2 Logical AND operator, message must contain word1
and word2.
?–  word1_NOT_ word2 Logical NOT operator, message must contain word1
but not word2.
?–  word1_ANDNOT_word2 The same as _AND__NOT_.
?–  word1_WITHIN[#]OF_word2 word1 has to be within # words of word2,
where # is a number.
?–  _HAS[#]OF_ word The body has to contain # of the word, where # is a
number.
The fi lter will match if a single item in the list is matched. You can increase this
by changing the minimum number of matches required.
To create a Keyword fi lter, you fi rst need to create the Filter List. To do this, refer
to the Filter List section. Once you have created the Filter List, you can create the
Keyword fi lter (see Figure 5.11):
1. Go to Settings | Filtering | Keyword. If this is grayed out, select the
Scan Job or Template fi rst.
2. Select the Scan Job or Template.
3. Select Message Body under Keyword Fields.
4. Select the Filter List.
5. Under Filter select Enabled.
6. Select the required Action.
7. If you set an Action of Tag, click on the Identify tab and check the Subj
Line and/or Msg Hdr boxes.
8. Select if you want to Send Notifi cations or Quarantine Files.
9. Select which messages the fi lter should effect; Outbound, Inbound, or
Internal.
10. Specify the Minimum Unique Keyword Hits.
Each Keyword fi lter can be disabled by selecting Disabled from the Filter List.


Pages:
209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233