Cisco Cisco Email Security Appliance X1050 Troubleshooting Guide
Exclude Words When Using Dictionary Message
Filters
Filters
Document ID: 118578
Contributed by Cisco TAC Engineers.
Oct 14, 2014
Contents
Introduction
Related Information
Related Information
Introduction
This document describes how to exclude words when using dictionary Message Filters.
On the Cisco Email Security Appliance (ESA), when using a dictionary match filter, you may need to exclude
certain phrases that contain words in the dictionary.
certain phrases that contain words in the dictionary.
The solution is to set up a message filter as follows:
if (dictionary−match("dictionary1") AND (not(dictionary−match("exclude_dictionary2"
)))) {quarantine('Policy');
}
The effect of this message filter is that it will catch any words that are listed in 'dictionary1' but it will deliver
any message that contains words in 'exclude_dictionary2'.
any message that contains words in 'exclude_dictionary2'.
The only drawback to this is if a message contains words in both dictionaries, then the message will get
delivered.
delivered.
Related Information
Cisco Email Security Appliance − End−User Guides
•
Technical Support & Documentation − Cisco Systems
•
Updated: Oct 14, 2014
Document ID: 118578