Entrevistas a Gerentes de Empresas de Seguridad

The Policy Configuration - Job Templates contains various jobs for content filtering with dictionaries.

•

Block offensive content

Search for obscene and pornographic language •

Block script commands

Search for script commands that could cause damage •

Block emails containing personal records

Search for terms common to resumés/CVs •

Block emails from the "Nigeria Connection"

Search for terms specific to “Nigeria” e-mails

We will use the Block offensive content job as an example. Drag this job to the Mail

Transport Jobs folder and open it with a double-click.

General Settings

Under the General tab, enter your own name for the job. An active (enabled) job has a checkmark in the job symbol. Set the job to Enabled: Yes. Once you have saved your settings with Apply and closed the job, the job is enabled.

By default, the Subject extension is pre-set to AntiVir Wall checked. If enabled, this text is added to the subject of each mail checked by the job.

This job does not process mails that are being resent from Quarantine (AntiVir Monitor

- <select quarantined email> - All Tasks - Resend quarantine item), even if the Resubmit the email to all AntiVir jobs has been enabled. The Ignore emails resent from quarantine option means that this job is systematically skipped when a mail is

resent from Quarantine.

For further information on sending quarantined mail, refer toSending From Quarantine. For details on the Mission Critical option, refer toThis job is mission-criticalin the "AntiVir" Chapter.

Setting up Address Conditions

Under the Addresses tab, specify the senders or recipients to which this job is to apply. You can select addresses from existing lists or from your own ones.

description underAddress Lists.

Setting up Content Conditions

Under the Conditions tab you can set the requirements as to which mails or documents a job is to be run for.

For the use and settings of conditions refer toConditions.

Note: The content conditions and the address conditions set in the Addresses tab must simultaneously come true, for a job to be run (logicalAND).

Selecting Dictionaries

Under the Content Restrictions tab, specify the dictionaries to be used by this job.

This job checks the subject line. The overall threshold value is set to 50. This means that when five words/phrases from the Offensive Language (English) or Offensive

Calculation: Every word or phrase in the Offensive Language list has a value of 10. In

this example, the threshold of 50 is reached when at least five words from these lists are found in the message.

Explanation: Every word or phrase in the Offensive Language list has a weighting of

10. Each word or phrase from this list found is counted and multiplied with the weighting and finally compared to the threshold value.

In this case: Let’s assume that 5 words from the dictionary were found in the message.

The sum of these words is multiplied with the weighting (10): 5 × 10 = 50. This value is compared to the threshold value. Since this is also 50, the action is executed.If only 4 words are found in the message, the total value is 40 (4 x 10), which is less than the threshold value, and no action is triggered.

You are using two different dictionaries for checking the subject and the message body for denied content.

The overall threshold value for the job is set to 20 and the first dictionary (A) specified in the job has a weighting of 20. The second dictionary (B) specified in this job has a

weighting of 1. This means that the specified actions are performed when one word or phrase from the dictionary A or 20 terms from the dictionary B are found.

The threshold is calculated as follows: Every word or phrase in the first word list A has

a weighting of 20. If an e-mail contains only a single phrase from this list, the threshold value is reached and the action is performed.

Every word or phrase in the second word list B has a weighting of 1. Each word or phrase from this list found is counted and the sum of them multiplied with the weighting. The found value is then compared to the threshold value. If, therefore, 21 words from the dictionary B are found in the message, these are multiplied by the value (1): 21 × 1 = 21. the sum is compared to the threshold value. Since this is 20, the action is executed. Tip: To handle content in different languages, create the appropriate Dictionaries and define one job for each language. For languages such as French and Spanish, define your own character conversion table. For further information on creating your own schemes, please contact our Support.

Defining Actions

Under the Actions tab, specify the actions to be taken when the job finds an e-mail

In this example, a copy of the message is placed in Quarantine and the message is deleted without being delivered to its recipient. A notification that the corporate policy was breached is sent to the Administrator. You can select this notification from the pull-down menu of available notification templates, which you can format using the HTML toolbar or by entering appropriate HTML code yourself.

Save the configuration of the AntiVir Exchange Management Console each time you have modified the settings. Click on the Save button . The configuration is saved in theConfigData.xmlfile located in theAvira\AntiVir Exchange\Config\folder. Pending changes are indicated by an asterisk (*) next to the top node.