Anti-Virus Settings

You can accept the default anti-virus settings, or configure advanced settings for inbound and outbound mail. The default anti-virus settings discard viruses, add a warning banner to encrypted and unscannable attachments, quarantine suspicious attachments before removing them, and add a warning banner.

To configure anti-virus settings:

  1. Choose one of the following basic configuration options for anti-virus filtering:
    • To accept the default settings: Leave Default Anti-Virus Settings selected, and click Next to proceed directly to the wizard's Anti-Spam Settings page.
    • To configure advanced settings: Select Advanced Configuration, and click Next to proceed to the configuration pages for inbound and outbound anti-virus settings.

    There are five threat categories that apply to both inbound and outbound messages:

    • Viruses: Messages containing known viruses. By default, messages containing viruses are discarded for all users. A notification is not sent and no banner is added.
    • Unscannable Attachments: Messages with attachments that cannot be scanned (for reasons other than encryption). By default, unscannable attachments are delivered to all users. A banner is added advising users that the message is not guaranteed to be virus-free and should not be opened unless it is an expected message.
    • Encrypted Attachments: Messages with attachments that could not be scanned specifically because of encryption. By default, encrypted attachments are delivered to all users. A banner is added advising users that the message is not guaranteed to be virus-free and should not be opened unless it is an expected message.
    • Suspect Attachments: Messages with attachment types that are likely to contain viruses. By default, for all users, messages with suspect attachments are quarantined, the attachments are removed, and the messages are delivered. A banner is added advising users that potentially dangerous attachments were identified and removed. A list of attachment types can be configured by clicking the Suspect Attachments link.
    • Restricted Attachments: Allows administrators to create a customized policy for blocking messages with specific kinds of attachments. By default, for all users, messages with restricted attachments are quarantined, the attachments are removed, and the messages are delivered. A banner is added advising users that potentially dangerous attachments were identified and removed. A list of attachment types can be configured by clicking the Restricted Attachments link.
  2. On the Anti-Virus Inbound Advanced and Anti-Virus Outbound Advanced pages, from the Take action drop-down list, select an action for each threat category. Different actions are available for each threat category, depending on the severity of the threat (for example, the Deliver and Reject actions are not available for the Viruses rules).

    Anti-Virus Inbound Advanced

    Anti-Virus Outbound Advanced

    Choose from the following actions:

    • Deliver: Deliver the message intact to the recipient.
    • Quarantine: Isolate the message in a quarantine.
    • Reject: Discard the message and send a “bounce-back” message to the sender advising that the message has been disallowed.
    • Discard: Discard the message without notice.
    • Quarantine and deliver: Send a copy of the message to the quarantine and deliver a copy to the recipient.
    • Quarantine, drop file(s) and deliver: Send a copy of the message to the quarantine and deliver a copy to the recipient with the relevant attachments removed.
    • Drop file(s) and deliver: Deliver the message to the recipient with the relevant attachments removed.
    • Tag subject and deliver: Deliver the message to the recipient with a modified subject that indicates the threat.
  3. Select Notify and Banner settings for each threat category by clicking the hyperlinked text in the Notify and Banner columns. Configure using the options available in the pop-up dialog boxes.
    • Notify: Copy a specified recipient using Cc or Bcc, as specified in the Notify dialog box, whenever this policy rule is triggered. If instead you select the Redirect to option, the notification is delivered to the specified address only. If such a notification is added to a threat category (e.g. Encrypted Attachments) for which the action involves delivery, the message itself is also redirected to the specified recipient. The original intended recipients receive nothing. You can add a notification message for each of the three Notify options. Viruses are automatically removed from redirected messages.
    • Banner: [Inbound messages only] Attach disclaimers or other notifications to messages to alert users. Banners can be customized for each policy rule.
  4. Click Next to move from Anti-Virus Inbound Advanced to Anti-Virus Outbound Advanced. When you have finished configuring advanced anti-virus settings, click Next to proceed to the wizard's Anti-Spam Settings page.