Cisco ISA500 Series Administration Manual page 231

Security Services
Email Reputation Filter
STEP 3
STEP 4
STEP 5
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
• Enable Anti-Spam Filter: Click On to enable Email Reputation Filter, or check
Off to disable it.
• SMTP Server Address: Enter the address of the SMTP server.
• Choose Reputation Threshold: Specify the block sensitivity as either
Conservative, Moderate or Aggressive, or as a numerical threshold (Custom).
When the Custom radio button is selected, the drop-down lists next to it are
enabled allowing the threshold values to be entered. The allowable values
for the threshold are integers from -10 to -1 and the value -0.5.
The Email Reputation Filter detects spam emails based on the reputation
score of the sender's IP address. The sender's address is the address that
initiated the connection to the SMTP server, not an address within the email
header.
Specify the actions for SPAM and SUSPECT SPAM emails:
• Action for SPAM Is: Choose Block to block the email, or choose TAG to get
the email tagged with [SPAM].
• Action for SUSPECT SPAM Is: Choose Block to block the email, or choose
TAG to get the email tagged with [SUSPECT SPAM].
Choose one of the following actions if the Email Reputation Filter service is
unavailable:
• Do not accept any emails until reputation services are restored (emails
will be delayed): If you choose this option, all emails will be delayed until the
Email Reputation Filter service is restrored.
• Deliver all emails without checking for spam: If you choose this option, you
can deliver all emails without checking for spam. This is the default setting if
Email Reputation Filter service is unavailable.
Click Save to apply your settings.
7
225