Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

The 

trace

 function can provide quick feedback on message filters that use the 

dictionary-match()

 rule. See 

 for more information. You can also use the 

quarantine()

 action 

to test filters, as in the 

quarantine_codenames

 filter example above.

DLP dictionaries are groups of words or phrases that work in conjunction with the 
RSA DLP scanning feature on the appliance and are available to custom DLP 
policies. Use the DLP dictionaries to scan messages and message attachments for 
the words and phrases included in the dictionary in order to take appropriate 
action in accordance with your corporate policies. AsyncOS comes with a set of 
predefined dictionaries from RSA Security Inc., but you can create custom DLP 
dictionaries.

You can also create your own dictionary as a text file on your local machine and 
import it onto the appliance. Use line breaks for each term in the dictionary text 
file. Dictionary terms are case-sensitive and can contain non-ASCII characters.

Wildcard

*

Anchors

Ends with: foo

$

Begins with: 

^

foo

Email address
(Do not escape the period)

, 

 (ends with)

Subject

(keep in mind when using the 

^

 anchor in email 

subjects that subjects are often prepended with 
“RE:” or “FW:” and the like)