InterScanTM Messaging Security Virtual Appliance - Online Help ...

Trend Micro InterScan Messaging Security Virtual Appliance Administrator’s Guide
Managing Policies
13-2
IMSVA policies are rules that are applied to SMTP and POP3 email messages. Create
rules to enforce your organization’s antivirus and other security goals. By default,
IMSVA includes a Global Antivirus rule to help protect your network from viruses and
related Internet threats. Because an antivirus rule addresses the most critical and
potentially damaging types of messages, you should always keep it in the first position on
the rule list so IMSVA can analyze traffic for virus content first.
The antivirus rule does not protect against spam. For the best protection against spam,
configure a custom rule that includes spam in the scanning conditions, and activate the
IP Filtering product.
Note: Before creating a new policy, ensure that you have defined the internal addresses. See
Configuring Internal Addresses on page 15-2 for more information.
How the Policy Manager Works
You can create multiple rules for the following types of policies. Use policies to reduce
security and productivity threats to your messaging system:
• Antivirus: Scans messages for viruses and other malware such as spyware and
worms.
• Others: Scans spam or phishing messages, message content, and other attachment
criteria.
An IMSVA policy has the following components:
• Route: A set of sender and recipient email addresses or groups, or an LDAP user or
group to which the policy is applied. You can use the asterisk (*) to create wildcard
expressions and simplify route configuration.
• Filter: A rule or set of rules that apply to a specific route, also known as scanning
conditions. IMSVA contains predefined filters that you can use to combat common
virus and other threats. You can modify these predefined filters or define your own
filters.