Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
281 Views 2 Replies Latest reply: Jan 9, 2014 4:34 AM by ta_support RSS
ta_support Newcomer 2 posts since
Jan 7, 2014
Currently Being Moderated

Jan 7, 2014 10:54 AM

'Whitelist' file with a particular filename

We are running MEG 7.5.1. We have a Compliance Rule configured to quarantine emails when the predefined dictionary named 'Date Of Birth and Name' is matched. This works well. However we have a standard application form PDF that is sent by numerous users on a daily basis which contains the words 'Date of birth' within the form, which obviously triggers the Compliance Rule created above. This creates 20-30 false/positives daily that we have to release from Quarantine. For argument sake the filename of the application form is 'appform.docx'. Is it possible to 'whitelist' this form even though it contains the words 'Date of birth' so that is not quarantined? All other filenames must continue to be quarantined. When testing using the 'File Filtering' compliance rule, we found that although this allows the email through, the Complaince Rule to check for Date of Birth Name is still tested against the email as well, and is therefore still quarantined. Also, I tried creating a separate Email Policy, without the Date of Birth and Name compliance rule configured, and moved this policy above the existing one. This unfortunately bypasses the Date of Birth and Name compliance rule all together because only ONE policy can be applied to an email.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points