Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working with Filters and Policies > Managing filters > Creating and configuring a filter > Custom content
Custom content
Administrator Help | Forcepoint Email Security | Version 8.5.x
Use a custom content filter to allow message analysis based on conditions you configure. The Email module does not provide a default custom content filter.
 
* 
Note 
You can use the Add (or Edit) Rule page to add a rule for a custom content filter. You must have already defined a custom content filter before you attempt to add a custom content rule. See Adding a rule.
Custom content filter options are configured on the page Main > Policy Management > Filters > Add (or Edit) Filter.
Configure custom content filter
1.
Configure whether to trigger the filter on the match of a single condition or on all defined conditions; from the section Filter Properties, click the radio button Match all conditions or Match any condition.
2.
Specify the conditions; from the section Filter Conditions, click Add.
The Add Condition dialog box displays.
3.
In the Add Condition dialog box, select the message attributes and operators to configure the custom filter.
The following table displays all available message attributes and operators. All message attributes except DKIM verification include the user-configurable entry field Filtering criteria.
 
Message Attribute
Operator Options
Additional Options
Sender IP address
Is, Is not
None
Envelope sender
Contains, Does not contain, Matches regular expression, Does not match regular expression
None
Envelope recipient
Contains, Does not contain, Matches regular expression, Does not match regular expression
None
Number of envelope recipients
Equals, Does not equal, Is less than, Is greater than
None
From field address
Contains, Does not contain, Matches regular expression, Does not match regular expression
None
To field address
Contains, Does not contain, Matches regular expression, Does not match regular expression
None
Cc field address
Contains, Does not contain, Matches regular expression, Does not match regular expression
None
Message subject
Contains, Does not contain, Matches regular expression, Does not match regular expression
Match case
Message header: partial
Contains, Does not contain, Matches regular expression, Does not match regular expression
Message attribute text (user configured), Match case
Message header: complete
Contains, Does not contain, Matches regular expression, Does not match regular expression
Match case
Message body text
Contains, Does not contain, Matches regular expression, Does not match regular expression
Match case
Message size
Equals, Does not equal, Is less than, Is greater than
Filtering criteria is in KB
DKIM verification result
DKIM verification is successful, DKIM verification failed
None
True Source IP
Is, Is not
None
Digital Fingerprinting analysis result
Is spam, Is clean
None
LexiRules analysis result
Is spam, Is clean
None
Heuristics analysis result
Equals, Is less than, Is greater than
Enter a floating-point value from 0–25. For example, the value 6 corresponds to a heuristics analysis level of Medium.
Email hybrid service analysis result (available only when your subscription includes the Email Hybrid Module)
Equals, Is less than, Is greater than
Enter a floating-point value from 0–25. For example, the email hybrid service uses a threshold value of 6 to designate a message as spam.
4.
Click OK.
The Add Condition dialog box closes and the conditions are added to the Filter Conditions list.
5.
Change the order of filter conditions; mark the check box next to the filter in the Filter Conditions list and click Move Up or Move Down.
6.
Delete a set of filter conditions; mark the check box next to the filter in the Filter Conditions list and click Remove.
7.
Configure additional filter settings and click OK.
The custom content filter settings are saved.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Working with Filters and Policies > Managing filters > Creating and configuring a filter > Custom content
Copyright 2022 Forcepoint. All rights reserved.