cancel
Showing results for 
Search instead for 
Did you mean: 

Invalid blocking based on cardnumber rule

Jump to solution

Recently we've been having troubles with customers emailing us and having their email blocked unexpectedly.  The messages get quarantined "Quarantined by Content policy (filter 'Credit Card Number')" even though the messages themselves very clearly do not actually contain card numbers.  After careful examination we're finding that links in the email seem to trigger the filter, and the main culprit seems to be email tracking links inserted by SideKick by Hubspot.

Example link:

<http://t.sidekickopen17.com/e1t/c/5/f18dQhb0S7lC8dDMPbW2n0x6l2B9nMJW7t5XZs2zW-gYW5vwsYl8q5T4zW1p1hXH...5265992707473408&pi=b263ed1a-d2b5-4947-a900-77f07125985d>

It's pretty exasperating having to manually release these (or worse, email our customers and tell them to uninstall software and remove footers from their email to prevent these false positives).

Any suggestions on how to better train the card number filter?

Thanks!

1 Solution

Accepted Solutions

Re: Invalid blocking based on cardnumber rule

Jump to solution

Hello stephans,

The credit card content filter runs a registered expression that looks for specific patterns that are common to valid credit card numbers.  In some cases, these filters will trigger off of content with in URLs, headers or even source code of a message.  You can change the action we take on an item and have the subject tagged rather than quarantine otherwise, the only option to avoid this is to disable the content filter.

Karen Widhalm

Product Specialist

SaaS Email and Web Security

Intel Security

1 Reply

Re: Invalid blocking based on cardnumber rule

Jump to solution

Hello stephans,

The credit card content filter runs a registered expression that looks for specific patterns that are common to valid credit card numbers.  In some cases, these filters will trigger off of content with in URLs, headers or even source code of a message.  You can change the action we take on an item and have the subject tagged rather than quarantine otherwise, the only option to avoid this is to disable the content filter.

Karen Widhalm

Product Specialist

SaaS Email and Web Security

Intel Security