About Virus Outbreak Detection (Vod); Spamblocker Actions, Tags, And Categories; Spamblocker Tags - Watchguard Firebox X15 User Manual

spamBlocker

About Virus Outbreak Detection (VOD)

Virus Outbreak Detection (VOD) is a technology that identifies email virus outbreaks worldwide within
minutes. Provided by Commtouch, an industry leader in email spam and virus protection, VOD isincorporated
into the spamBlocker security service. VOD uses traffic analysis technology to provide zero hour protection
against viruses. If you use both spamBlocker and Gateway AntiVirus, the two features work together to keep
viruses out of your network.
The VOD feature works on both SMTP and POP3 email traffic. If VOD detects a virus in a POP3 email message,
the virus is automatically stripped from the message and the Edge generates a log message to tell you that a
zero hour virus was detected. If VOD detects a virus in an SMTP email message, you can configure the Edge to
automatically strip the virus, or to quarantine the email message.

spamBlocker actions, tags, and categories

The Firebox uses spamBlocker actions to apply decisions about the delivery of email messages. When a
message is assigned to a category, the related action is applied.
Not all categories are supported when you use spamBlocker with the POP3 proxy.
Allow
Let the email message go through the Firebox normally.
Add a subject tag
Let the email message go through the Firebox, but insert text in the subject line of the email message
to mark it as spam or possible spam. You can keep the default tags or you can customize them, as
described in spamBlocker tags. You can also create rules in your email reader to sort the spam
automatically, as described in
Quarantine (SMTP only)
Send the email message to the Quarantine Server. Note that the Quarantine option is supported
only if you use spamBlocker with the SMTP proxy. The POP3 proxy does not support this option.
Deny (SMTP only)
Stop the email message from being delivered to the mail server. The Firebox sends this 571 SMTP
message to the sending email server: Delivery not authorized, message refused.The Deny option is
supported only if you use spamBlocker with the SMTP proxy. The POP3 proxy does not support this
option.

spamBlocker tags

If you select the spamBlocker action to add a tag to certain email messages, the Firebox adds a text string to
the subject line of the message. You can use the default tags provided, or you can create a custom tag.
This example shows the subject line of an email message that was found to be spam. The tag added is the
default tag: ***SPAM***.
Subject: ***SPAM*** Free auto insurance quote
This example shows a custom tag: [SPAM]
Subject: [SPAM] You've been approved!
220
Create rules for your email reader.
Firebox X Edge e-Series