Rule Type

  1. Select one of the following rule types:
    • Add Banner: Add a banner to the top or bottom of the message. This type of rule is typically used to add legal banners to outgoing messages, acceptable use reminders for incoming messages, etc.
    • Keyword list: Search for keywords in messages using keywords or regular expressions. Keyword lists are often used for data leakage prevention, detection of inappropriate behavior, etc.
    • Attachment type list: Detect certain types of files attached to messages. This type of list is typically used for restricted or allowed attachment lists. Both the file extension and the file type as reported by Sophos Anti-Virus Engine are used to detect the attachment file type.
    • Offensive language: Detect the use of offensive language in messages. Sophos provides an initial list of offensive words that can be used as a starting point for creating a list of offensive language that is customized to your environment.
    • Watch list: Detect messages being sent or received by specific users, groups, or email addresses. This type of list is typically used for monitoring possible misuse of email by specific users or groups.
    • Hostname/IP address list: Detect messages originating from specific hosts or IP addresses. This type of list is typically used to implement policies specific to servers operated by trusted or untrusted entities.
    • Use only message attributes: Use message attributes to trigger this policy rule. Valid message attributes to detect include message size, attachment size, headers, and the source IP address of the message.
    • Bulk email messages: You can use a Bulk email messages policy rule to detect opt-in bulk email messages, such as those from mailing lists, advertisers, political parties, and others that users have opted to receive mail from.
  2. [Optional] Select Enable advanced policy options to make all additional wizard options available. Certain steps in the wizard are grayed out, according to the selected rule type.
  3. Click Next.