Руководство Пользователя для Cisco Cisco Email Security Appliance C690
Chapter 14 Text Resources
14-430
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Example Dictionary Entries
Testing Content Dictionaries
The
trace
function can provide quick feedback on message filters that use the
dictionary-match()
rule. See
Debugging Mail Flow Using Test Messages:
Trace, page -446
for more information. You can also use the
quarantine()
action
to test filters, as in the
quarantine_codenames
filter example above.
DLP Dictionaries
DLP dictionaries are groups of words or phrases that work in conjunction with the
RSA DLP scanning feature on the appliance and are available to custom DLP
policies. Use the DLP dictionaries to scan messages and message attachments for
the words and phrases included in the dictionary in order to take appropriate
action in accordance with your corporate policies. AsyncOS comes with a set of
predefined dictionaries from RSA Security Inc., but you can create custom DLP
dictionaries.
RSA DLP scanning feature on the appliance and are available to custom DLP
policies. Use the DLP dictionaries to scan messages and message attachments for
the words and phrases included in the dictionary in order to take appropriate
action in accordance with your corporate policies. AsyncOS comes with a set of
predefined dictionaries from RSA Security Inc., but you can create custom DLP
dictionaries.
You can also create your own dictionary as a text file on your local machine and
import it onto the appliance. Use line breaks for each term in the dictionary text
file. Dictionary terms are case-sensitive and can contain non-ASCII characters.
import it onto the appliance. Use line breaks for each term in the dictionary text
file. Dictionary terms are case-sensitive and can contain non-ASCII characters.
Table 14-2
Example Dictionary Entries
Description
Example
Wildcard
*
Anchors
Ends with: foo
$
Begins with:
^
foo
Email address
(Do not escape the period)
(Do not escape the period)
foo@example.com
,
@example.com
example.com$
(ends with)
@example.*
Subject
An email subject
(keep in mind when using the
^
anchor in email
subjects that subjects are often prepended with
“RE:” or “FW:” and the like)
“RE:” or “FW:” and the like)