Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The 

trace

 function can provide quick feedback on message filters that use the 

dictionary-match()

 

 for more information. You can 

also use the 

quarantine()

 action to test filters, as in the 

quarantine_codenames

 filter example above.

DLP dictionaries are groups of words or phrases that work in conjunction with the RSA DLP scanning 
feature on the appliance and are available to custom DLP policies. Use the DLP dictionaries to scan 
messages and message attachments for the words and phrases included in the dictionary in order to take 
appropriate action in accordance with your corporate policies. AsyncOS comes with a set of predefined 
dictionaries from RSA Security Inc., but you can create custom DLP dictionaries.

You can also create your own dictionary as a text file on your local machine and import it onto the 
appliance. Use line breaks for each term in the dictionary text file. Dictionary terms are case-sensitive 
and can contain non-ASCII characters.

You manage DLP dictionaries using the DLP Policy Manager. To open the DLP Policy Manager, select 
the Mail Policies > DLP Policy Manager menu in the GUI. For more information on the DLP Policy 
Manager, see 

Click the Custom DLP Dictionaries link in the DLP Policy Manager.

The DLP Dictionaries page appears.

Click Add Dictionary.

       quarantine('Policy');

       }

Wildcard

*

Anchors

Ends with: foo

$

 

Begins with: 

^

foo

Email address

 

(Do not escape the period)

, 

 (ends with)

 

Subject

 

(keep in mind when using the 

^

 anchor in email subjects that 

subjects are often prepended with “RE:” or “FW:” and the like)