List of phrases to exclude

Administrators can add a list of suspicious words to a regular expression, script, or dictionary classifier. For each content item transmitted, the rule applies its action only if the total number of matches is above the threshold, and a string from the specified list is found. If the number of matches is reached but no strings from the list are present, no further analysis is performed.

Example:

The pattern is Social Security numbers, the number of matches is 2, and the list of phrases to exclude contains “Social Security” and “credit card.” The distributed content contains 3 Social Security numbers: 111-22-3333, 222-33-4444, 444-55- 6666, but none of the words were found. Since the number of found distributed content (3) is greater than the number of matches (2), but there were no dictionary words in the email, no action is taken.