Messaging Gateway

 View Only
  • 1.  End-User Good Senders

    Posted Dec 18, 2014 06:29 AM

    Hello,

     

    An end-user specified a certain sender as a good sender from his own quarantine a while ago (replication is not an issue).

     

    When this user receives a new email from this sender, the Message Audit Log displays the following:

    Verdict Filter Policy Policy Group Details Message Part Matching Text
    User allow 
    user static allow email address 
    default  None   —   — 
    Content Filtering violation: <policy> 
    <policy> 
    default  None 
    <attach.pdf> 
    <category> 
     

     

     

    How is it possible to bypass the content filtering after a static allow has matched?

     

    Thanks,

    Justine.

     



  • 2.  RE: End-User Good Senders

    Broadcom Employee
    Posted Dec 18, 2014 03:33 PM

    What is the action that the content filtering rule is taking?

    We have a multiverdict engine, so conflicting actions will happen.



  • 3.  RE: End-User Good Senders

    Posted Dec 19, 2014 02:24 AM

    The action applied is to hold the message in quarantine, which is the action configured for the content filtering rule.

    The scenario is:

    - a user is receiving legitimate email from a specific sender to the quarantine

    - the user adds this sender to the good senders list in the end-user quarantine

    - emails from this sender (probably containing executables) are being quarantined because of a subsequent content filtering policy

     

    Is it possible to bypass content filtering for good senders?

     

    Thanks,

    Justine.

     



  • 4.  RE: End-User Good Senders

    Posted Dec 20, 2014 03:34 AM

    Hello AFIK you cannot bypass content filtering policies for local good senders. It will bypas the SPAM filtering for local good senders.



  • 5.  RE: End-User Good Senders

    Broadcom Employee
    Posted Dec 22, 2014 01:40 PM

    For the Local Good Sender Domains policy, you can add an action to bypass a specific content filtering rule. This is not the case with the end user settings, since that is not configurable. You should add this sender to the local good senders list and add the extra action to that policy.