Configure URL analysis filter

Steps

  1. From the section Filter Properties, in the list URL Categories, mark the check boxes for each URL category that the filter should detect.

    Expand top-level categories; click the plus sign.

    Select all sub-categories in a top-level category; when the category is expanded, click select all.

    Deselect all sub-categories in a top-level category; click unselect all.

    Select all categories; at the top of the URL Categories list, click All Categories.

    Note:

    You can configure URL analysis policy rules to detect and contain malicious URLs so that they cannot be released by a Personal Email Manager end user. Configuration requires all URL categories under Security to be selected.

    See Managing filter actions for information about creating a URL analysis filter action for handling email that may contain a malicious URL.

  2. From Filter response, mark the check box for one or both of the following filter responses; Modify matching URLs and Bypass URL analysis if message size exceeds.
    • Modify matching URLs

      Selection displays options for modifying and neutralizing URLs. Select the desired response and notification options when a malicious URL is detected:

      • Remove matching URLs from message subject and body. Neutralize URLs by rewriting the scheme and bracketing the last dot of the URL domain.

        Selection changes a malicious URL as follows:

        Before neutralization: http://www.malicious.com.ca/index.html.

        After neutralization: hXXp://www.malicious.com[.]ca/index.html.

      • Rewrite URLs and link text labels with custom settings.

        Enter the rewritten URL in the text field Rewritten URL or leave the field blank to remove URLs.

        Enter the rewritten link text label in the text field Rewritten link text label or leave the field blank to remove link text labels.

      • (Optional) From the section Options, mark the check box Notify recipient when an email contains a modified URL.

        In the text box, enter the desired notification text.

        Maximum length of 8192 characters total, up to 990 characters per line; a line break is two characters. The %CATEGORY% variable can be used in the notification message to inform the recipient about the specific categories triggered by the filter.

        Select where the notification should appear; Insert notification at top of message or Insert notification at bottom of message.

        The default location is at the top of the message.

    • Bypass URL analysis if message size exceeds

      In the text field, enter a message size in KB (default is 3072).

      Selection indicates to use message size to determine whether URL analysis is bypassed.

  3. Configure additional filter settings and click OK.
    The URL analysis filter is saved.