cancel
Showing results for 
Search instead for 
Did you mean: 

Blocking emails with more than X hits

Jump to solution

Hello,

I would like you to give me a hand with this. I want to create an email protection rule, based on a list of 100 words. If an email containing 1 or 2 of this words, it's ok and I want it to leave it go. But if the email contains more than 3 of those words, I mean 3 or more hits, it should be blocked by the DLP.

Do you know how could I achieve this?

Thanks a lot!

1 Solution

Accepted Solutions
Highlighted
it1024
Level 9
Report Inappropriate Content
Message 2 of 4

Re: Blocking emails with more than X hits

Jump to solution

Hi,

Please check the following to see if it works:

1- make a Dictionary containing your 100 words, where weight of each word is set to 1 and the threshold set to 3.

2- make a Tagging Rule in which 1st step you choose Application Definition as Email Client Applications (if I were you I would add Explorer as well for the attached files) and in step 5 you choose your Dictionary of 100 words, and in step 7 give it a proper Tag.

3- in Protection Rules make a new Email Protection Rule in which you go to step 2 and choose your tag and in step 9 choose yr desired action.

It should work!

3 Replies
Highlighted
it1024
Level 9
Report Inappropriate Content
Message 2 of 4

Re: Blocking emails with more than X hits

Jump to solution

Hi,

Please check the following to see if it works:

1- make a Dictionary containing your 100 words, where weight of each word is set to 1 and the threshold set to 3.

2- make a Tagging Rule in which 1st step you choose Application Definition as Email Client Applications (if I were you I would add Explorer as well for the attached files) and in step 5 you choose your Dictionary of 100 words, and in step 7 give it a proper Tag.

3- in Protection Rules make a new Email Protection Rule in which you go to step 2 and choose your tag and in step 9 choose yr desired action.

It should work!

it1024
Level 9
Report Inappropriate Content
Message 3 of 4

Re: Blocking emails with more than X hits

Jump to solution

Re: Blocking emails with more than X hits

Jump to solution

​ I'm happy to confirm that it worked!! many thanks ​ for your idea and help!!!

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community