InterScanTM Messaging Security Virtual Appliance - Online Help ...

3. Next to List name, type a descriptive name.
Common Policy Objects
4. Next to Match, select one of the following that specifies when IMSVA takes action:
• Any specified: Email message content can match any of the expressions in the
list.
• All specified: Email message content must match all the expressions in the list.
• Not the specified: Email message content must not match any of the
expressions in the list.
• Only when combined score exceeds threshold: Next to Total message
score to trigger action, type a number that represents the maximum score for
allowed keyword expressions. When you add an expression, you can set a value
for the Score.
5. To create an expression, click Add. The Add Keyword Expression list appears.
6. Type the keywords. For a partial match, type the keyword. To specify an exact
match, use "\s" (without the quotes) before and after the keyword.
For example:
• keyword matches "keywords", "akeyword", and so on.
• \skeyword\s matches "keyword" only.
7. Click Save. The Add Keyword Expression list appears.
8. To instruct IMSVA to consider the capitalization of email content when it uses the
filter, select the check box under Case sensitive.
9. If you selected Only when combined score exceeds threshold:
a. Specify a threshold in the Total message score to trigger action field.
b. Select a value from the Score drop-down box.
10. Click Save. The Keywords & Expressions screen appears with the new keyword or
expression appearing in the table.
To add or edit a keyword or expression during policy creation or modification:
1. Create or modify an "Other" (not an Antivirus) policy.
• For information on creating a new rule, see Adding Policies on page 16-2.
• For information on modifying an existing rule, see Modifying Existing Policies
on page 19-2.
14-13