Cisco Cisco Email Security Appliance C160 Mode D'Emploi

The 

trace

 function can provide quick feedback on message filters that use the 

dictionary-match()

 rule. See 

 for more information. You can also use the 

quarantine()

 action 

to test filters, as in the 

quarantine_codenames

 filter example above.

DLP dictionaries are groups of words or phrases that work in conjunction with the 
RSA DLP scanning feature on the appliance and are available to custom DLP 
policies. Use the DLP dictionaries to scan messages and message attachments for 
the words and phrases included in the dictionary in order to take appropriate 

       quarantine('Policy');

       }

Wildcard

*

Anchors

Ends with: foo

$

Begins with: 

^

foo

Email address
(Do not escape the period)

, 

 (ends with)

Subject

(keep in mind when using the 

^

 anchor in email 

subjects that subjects are often prepended with 
“RE:” or “FW:” and the like)