Symantec 10490452 - Mail Security 8220 Administration Manual page 84

84 Configuring email filtering
Creating virus, spam, and compliance filter policies
If a message is unscannable
for viruses
If a message contains an
encrypted attachment
If a message contains a
suspicious attachment
If a message contains
spyware or adware
7 Select the desired action.
See Table 4-2, "Filtering actions by verdict,"
you need to specify additional information in fields that appear below the
action.
8 Click Add Action.
9 If desired, add more actions.
See Table 4-3, "Compatibility of filtering actions by verdict,"
10 Click Save.
Determining your suspicious attachment policy
When you choose the condition, "If a message contains a suspicious
attachment," two additional actions become available:
Delay message delivery
■
Strip and hold in Suspect Virus Quarantine
■
Both of these actions enable you to make use of the Suspect Virus Quarantine to
delay filtering these messages until a later time, when updated virus definitions
may be available. This provides enhanced protection against new and emerging
virus threats.
By default, these messages are held in the Suspect Virus Quarantine for 6 hours.
You can vary the number of hours on the Settings > Quarantine page, Virus tab.
Changing default virus actions
By default, inbound and outbound messages containing a virus or mass-mailing
worm, and unscannable messages, including malformed MIME messages, will be
A message can be unscannable for viruses for a variety
of reasons. For example, if it exceeds the maximum file
size or maximum scan depth configured on the
Scanning Settings page, or if it contains malformed
MIME attachments, it may be unscannable. Compound
messages such as zip files that contain many levels may
exceed the maximum scan depth.
The message contains an attachment that cannot be
scanned because it is encrypted.
The message contains an attachment that, according to
Symantec filters, may contain a virus or other threat.
The message contains spyware or adware.
on page 64. For some actions
on page 68.