Defining a Filter | Surf Control 5.2.4 specification

3

POLICY MANAGER

Global Policy

•Message Attachment Filter – Enables you to scan for maximum message size or specify the types of attachments that you want to filter. These include types of attachment, such as *.gif, *.mp3 files, and executable files, such as *.exe and *.dll files by file extension or MIME type.

•Content Guardian – Provides maximum flexibility in filtering using SurfControl Content Dictionaries, with multiple filtering arguments.

•Standard Disclaimer filter – Adds text to all e-mail messages coming into or out of your organization enabling you to add your own corporate disclaimer easily.

Note: For Global Filtering Policy, all messages will pass through each filter one by one in the global filtering policy until a filter is triggered. When a message triggers a filter (except for the standard disclaimer), the action of this filter will be executed immediately. This message will not pass through all the remaining filters.

When you add a new sub-policy, all of these filters are made available to the new policy with whatever configuration you have set. You cannot edit filters from within a sub-policy, all editing must be done from within the Global Policy Filters menu. Configuration of Global Policy Filters is carried out in the Global Policy Filters screen.

Figure 3 - 18 The Global Policy Filter List screen

DEFINING A FILTER

To add a new filter to your policy, first specify the type of filter that you want to add. This is done in the Create New Filter screen.

Figure 3 - 19 Supplied Filters

Note: Filters can also be added at the sub-policy level.

82 Administrator’s Guide

SurfControl RiskFilter - E-mail V5.2.4

Image 87

Surf Control 5.2.4 manual Defining a Filter, The Global Policy Filter List screen

Contents

SurfControl RiskFilter E-mail Contents Policy Manager Riskfilter System Management Console Appendix Chapter Managing Your Messages with Riskfilter HOW Riskfilter Works Connection ControlRelay Control Mail Exchanger IP Address MX Preference Load Balancing with Riskfilter Load balancing with RiskFilter Launching Surfcontrol Riskfilter Riskfilter System Management ConsoleHttps//hostnameoripaddress10000 Riskfilter Management Console Administrator Https//hostnameoripaddress/adminOpening the RiskFilter Management Console Before YOU Start System Settings System Settings TAB What can be Configured in the System Settings TAB?Terminology Used Postmaster e-mail address ConfigurationSelect General Configuration from the System Settings tab General Smtp greeting Other SettingsAdmin Console Session Timeout Editing User Directories User Directories Open the User Directories screen Deleting a User Directory Click Add in the User Directories screen Microsoft Active Directory Select IBM Ldap Server IBM Ldap server Click Add in the User Directories screen Select Generic Ldap Generic Ldap Esmtp Server Information Validation settings Local Database Recipient File To add a local database Click Add Select General Secure Proxy from the System Settings tab Secure ProxyLocal Database Add/Edit Address screen is displayed Select Enable POP3 Proxy Select Enable Webmail ProxySelect Enable Imap Proxy Setting up the storage directories Select General Directories from the System Settings tabLogs and Archives Notifications Certificate Certificate Signing Request Select General Certificate from the System Settings tabImporting Certificates Exporting Certificates Receive Settings Connection SettingsConnection Control Allow Access List Smtp Greeting Delay 16 The Directory Attack Control screen Directory Attack Control SPF Authentication Configuration Relay ControlControlling relaying of messages Allowing relaying to specific domains Relay for Internal Senders Recipient Validation Adding details of domainsAdd validation servers 19 The Message Control screen Message Control 20 Set what action is taken on messages Exception Control To configure exception control Adding an IP or subnet address to the blacklist Black List Adding domain or e-mail addresses to the blacklist Importing and exporting Lists White List Adding an IP or subnet address to the White ListDynamic White List Receive Settings Delivering the messages Send SettingsSetting up the destination domains DOMAIN-BASED Delivery Select Forward mail to the following Smtp servers Using TLS authentication Transport Layer Security Advanced Delivery Traffic Control Send Settings Account Manager User Management Specifying Administrator Access Changing the Administrator Account Password Setting up Administrator Access Editing Administrator Accounts Personal E-MAIL ManagerSelect Account Manager from the User Management menu Setting up the PEM message 31 What the user sees Personal E-mail Manager Adding users Exporting lists of usersImporting lists of users User List End-user Bypass Anti-Spam SettingSetting up End User Control END-USER Control Authenticating PEM users User Authentication Authenticating remote users Update NOW License & Updates AVA and ASA License Expired Updating your Anti-Spam Agent Definitions Scheduled Update Select the Anti-Virus Agent Update check boxUpdating the Anti-Virus Agent Updating Component Licenses Select the Anti-Spam Agent Update check boxLicense Status Updating the Anti-Spam Agent Update Server Manually setting up a license serverViewing component licenses User Number Exceeded License Server Submitting a Support Request Admin Guide Contact SupportSelect Help Contact Support from the System Settings tab Help Configuration Wizard Firstboot Wizard KEY Points Key Points Policy Manager Policy Manager TAB What can be Configured in the Policy Manager TAB? Creating a Policy Defining UsersDefining the Action Global Policy Filter List Defining the Rules Importing and Exporting Lists Address Group Deleting Address Groups Adding Queues Queue Manager Select Queue Manager from the Policy Manager tab Editing a Queue Dictionary Manager Surfcontrol DictionariesEditing SurfControl Dictionary properties Changing the value of words in the SurfControl Dictionaries Adding words to the SurfControl DictionariesDeleting a word or phrase Create a new dictionary Custom Dictionaries Importing a SurfControl Dictionary Pack Importing Dictionaries Worthlesstab space15 balancetab space10 Creating a unicode text file Importing a unicode text file Exporting a dictionarySelect Import from a Unicode text file Creating a NEW SUB-POLICY Global Policy 15 Enter the details of the new Sub-policy Select Global Policy from the Policy Manager tab Editing a SUB-POLICY Deleting a SUB-POLICYAdding Filters to the Policy 18 The Global Policy Filter List screen Defining a Filter Select Global Policy Filters from the Policy Manager tab ANTI-VIRUS Agent FilterCreating a new filter Editing the Anti-Virus Agent Filter Global Policy Select Anti-Spam Agent DFP ANTI-SPAM Agent Filters Select Anti-Spam Agent Heuristics Configuring the Anti-Spam Agent Heuristics Filter Select Anti-Spam Agent LexiRules Configuring the Anti-Spam Agent LexiRules Filter 23 The Internet Threat Database Filter screen Internet Threat Database Filter Standard Disclaimer Editing the Internet Threat Database FilterSelect the Internet Threat Database Filter and click Next Select the Standard Disclaimer Filter Editing the Standard Disclaimer Filter General Content Filter Editing the General Content FilterSelect the General Content Filter and click Next Advanced Content Filter Editing the Advanced Content FilterSelect the Advanced Content Filter and click Next 27 The Expression screen Using the Expression List Using Logical Operators Occur gateway Assume Frequency =2 Examples showing the use of OperandsRiskFilter and Gateway and Innovation RiskFilter or Gateway or Innovation 28 Message Attachment Filter screen Message Attachment Filter Select the Message Attachment Filter and click Next Editing the Message Attachment Filter Content Guardian Creating a new Content Guardian filterSelect the Internet Content Guardian Filter and click Next Adding a filtering rule Dictionary Threshold Filter Deleting a filtering ruleHow the Dictionary Threshold Filter works Select the Dictionary Threshold Filter and click Next Configuring the Dictionary Threshold Filter Global Policy KEY Points Key Points Reports & Logs Reports and Logs TAB What can be Configured in the Reports and Logs TAB? Server status monitoring Dashboard Select Specified date range from the Logs for list box Master ReportQuerying the Master Report Select Master Report from the Reports and Logs tab Master Report Querying the Message Report Message Report Querying the Policy Report Policy Report Querying the Virus Report Virus Report Querying the Spam Report Spam Report Querying the Connection Report Connection Report Connection Report System Report Click View Messages Isolated MessagesManaging Isolated Messages Select Isolated Messages from the Reports and Logs tab Isolated Messages Virus Messages Managing the Virus MessagesSelect Virus Messages from the Reports and Logs tab 14 An Archived message Spam Messages Managing Spam MessagesSelect Spam Messages from the Reports and Logs tab To view a message click the subject Archived Messages Managing Archived MessagesSelect Archived Messages from the Reports and Logs tab Export Messages Reprocess Messages View MessagesClick Reprocess Messages 19 Select the check box alongside the message Deferred Messages Querying Deferred MessagesSelect Deferred Messages from the Reports and Logs tab 22 An Archived message KEY Points Key Points RiskFilter System Management Console Overview What can be Configured with the System Management CONSOLE? Rfmngr Account Accessing the Riskfilter System Management Console Webmin TAB What can be Configured in the Webmin TAB? Webmin Actions LOG Webmin ConfigurationIP access control Select Webmin Configuration from the Webmin tab Ports and Addresses Select Language from the Webmin Configuration screenSelect Logging from the Webmin Configuration screen Language Select Webmin Servers Index in the Webmin Webmin Servers IndexProxy Servers Adding Webmin Servers System TAB What can be Configured in the System TAB? Historic System Statistics Bootup and ShutdownChange Passwords Select Change Passwords in the System tab Select Multi Gateway Policy Routing in the System tab Multi Gateway Policy Routing Network Interfaces Network Configuration Multi-NIC configuration in RiskFilter Setting up additional NICsEnter an IP Address Routing and Gateways 11 The Create Bootup Interface screen DNS Client Select DNS Client from the Network Configuration tab 15 Host Addresses Host Addresses Running Processes System TimeSelect System Time in the System tab Click Sync system time System and Server Status Riskfilter TAB What can be Configured in the Riskfilter TAB? Riskfilter Backup Manager Riskfilter Services Manager Click Complete Riskfilter Cluster Wizard 25Load balancing Load balancing with RiskFilter 26 RiskFilter in a cluster set up Select Web Access Manager in the RiskFilter tab Riskfilter WEB Access Manager 28 The Update RiskFilter-E-mail screen Update Riskfilter E-MAIL KEY Points Key Points Appendix # sudo /etc/init.d/smgd status Using the Command Line Interface QTOOL.SH Clean queues Using the Command Line Interface Using the Command Line Interface Using the Command Line Interface Example 6 uninstalling the RiskFilter software UNINSTALL.SH All items were successfully uninstalled Productivity Categories Internet Threat Database CategoriesInternet Theat Database Categories Core / Liability Categories Core / Liability Categories Productivity Categories Other Special Events Index Administrator’s Guide SurfControl RiskFilter E-mail SurfControl RiskFilter E-mail Administrator’s Guide OpenSSL Sun RPC Apache Software License, Version Expat XML Parser Toolkit SPFJava Ldap