Руководство Пользователя для Cisco Cisco Email Security Appliance C160
14-9
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 14 Text Resources
Example Dictionary Entries
Testing Content Dictionaries
The
trace
function can provide quick feedback on message filters that use the
dictionary-match()
rule. See
Debugging Mail Flow Using Test Messages: Trace, page -446
for more information. You can
also use the
quarantine()
action to test filters, as in the
quarantine_codenames
filter example above.
DLP Dictionaries
DLP dictionaries are groups of words or phrases that work in conjunction with the RSA DLP scanning
feature on the appliance and are available to custom DLP policies. Use the DLP dictionaries to scan
messages and message attachments for the words and phrases included in the dictionary in order to take
appropriate action in accordance with your corporate policies. AsyncOS comes with a set of predefined
dictionaries from RSA Security Inc., but you can create custom DLP dictionaries.
feature on the appliance and are available to custom DLP policies. Use the DLP dictionaries to scan
messages and message attachments for the words and phrases included in the dictionary in order to take
appropriate action in accordance with your corporate policies. AsyncOS comes with a set of predefined
dictionaries from RSA Security Inc., but you can create custom DLP dictionaries.
You can also create your own dictionary as a text file on your local machine and import it onto the
appliance. Use line breaks for each term in the dictionary text file. Dictionary terms are case-sensitive
and can contain non-ASCII characters.
appliance. Use line breaks for each term in the dictionary text file. Dictionary terms are case-sensitive
and can contain non-ASCII characters.
You manage DLP dictionaries using the DLP Policy Manager. To open the DLP Policy Manager, select
the Mail Policies > DLP Policy Manager menu in the GUI. For more information on the DLP Policy
Manager, see
the Mail Policies > DLP Policy Manager menu in the GUI. For more information on the DLP Policy
Manager, see
Adding Custom Dictionaries
Step 1
Click the Custom DLP Dictionaries link in the DLP Policy Manager.
The DLP Dictionaries page appears.
Step 2
Click Add Dictionary.
quarantine('Policy');
}
Table 14-2
Example Dictionary Entries
Description
Example
Wildcard
*
Anchors
Ends with: foo
$
Begins with:
^
foo
Email address
(Do not escape the period)
foo@example.com
,
@example.com
example.com$
(ends with)
@example.*
Subject
An email subject
(keep in mind when using the
^
anchor in email subjects that
subjects are often prepended with “RE:” or “FW:” and the like)