Views:
You can configure expression lists for content filtering rules.

Procedure

  1. Go to Policies → Policy Objects.
  2. Click the Content Filtering Expression Lists tab.
  3. Do one of the following:
    • Click Add to configure a new expression list.
    • Click a list name to change the settings.
  4. Select a match condition that sets Deep Discovery Email Inspector to take action.
    • Any: Message content matches any of the keywords or expressions in the list.
    • All: Message content matches all keywords or expressions in the list.
    • Exclude: Message content does not match any of the keywords or expressions in the list.
    • Only when combined score exceeds threshold: Message content contains one or more keywords or expressions in the list. If only one keyword or expression was detected, its score must be higher than the threshold. If several keywords or expressions are detected, their combined score must be higher than the threshold.
      In the Total message score to trigger action field, specify the maximum score for allowed keyword expressions. When you add an expression, you can set a value for the score.
  5. To configure keyword expressions, perform the following steps:
    1. click Add or an expression name.
    2. Specify the keyword expression. For a partial match, specify the keyword. To specify an exact match, use \b before and after the keyword.
      For example:
      • keyword matches "keywords", "akeyword".
      • \bkeyword\b matches "keyword" only.
    3. (Optional) Select Case sensitive to match the specified keyword expressions with the exact casing.
    4. Select an option from the Score drop-down list. This information is used when you select the Only when combined score exceeds threshold match condition.
    5. Provide a description for the keyword expression.
    6. Click OK.
      A new entry appears on the Expressions table.
  6. Click Save.
    After adding an expression list, you can:
    • Click an expression list name to edit the settings.
    • Select an entry and click Delete to remove the selected entry.
      Note
      Note
      You cannot remove an expression list if it is associated with a content filtering rule.