Anti-Spam and Anti-Virus. Watchguard XCS

Policies

4. The features for each policy are displayed in the Policy Summary section.

The display will indicate the settings for each policy feature.

5. Click the Edit link for each set of features to modify the policy as required.

Anti-Spam and Anti-Virus

Configure your settings for this policy for inbound and outbound Anti-Virus, Spyware, Outbreak Control,

Malformed Mail, and Anti-Spam. Select Enabled or Disabled for each option as required for this policy, or select Undefined to use the inherited settings from another policy, the default policy, or the global settings.

User Guide

ƒ Anti-Virus — Enable or disable inbound and outbound Anti-Virus for this policy for Email and HTTP.

The scanner must be enabled globally to be used in policies. Independent inbound and outbound actions and notifications can be set for the Email and HTTP scanners for this policy.

ƒ Spyware — Enable or disable inbound and outbound Spyware detection for this policy for Email and

HTTP. The scanner must be enabled globally to be used in policies. Independent inbound and outbound actions and notifications can be set for the Email and HTTP scanners for this policy.

ƒ Outbreak Control — Set the inbound and outbound Outbreak Control settings for this policy.

Outbreak Control must be enabled globally to use this feature in policies. The Detection Hold Period is set in hours. The default hold period is 8 hours. In most cases, the Anti-Virus pattern files will be updated within 2-4 hours of a new virus being discovered. We recommend that you set the hold period for a long enough time to allow the files to be rescanned with updated Anti-Virus pattern files as they become available.

ƒ Malformed Mail — Set the Malformed Mail settings for this policy. Malformed Mail scanning must be enabled globally to use this feature in policies.

ƒ Anti-Spam — Set the Anti-Spam settings for each spam category ( Certainly , Probably , and Maybe

Spam ) for this policy. The Threshold spam score for each category should be set between 1-100. (The default global values are: Certainly Spam: 99, Probably Spam: 90, and Maybe Spam: 60). Independent notification actions can be set for the Email and HTTP scanners for this policy. Scanner settings and component weights for each Intercept feature can also be configured.

ƒ Scanners — Enable or disable each Intercept scanner for this policy. The scanner must be enabled globally to be used in policies. For Spam Words, dictionaries for this policy can be defined by selecting

Define in the Spam Words Dictionaries section. For Weighted Dictionaries, administrators can enter a custom weight for this policy, which must be between 1 and 10000.

ƒ Intercept Global Decision Strategy — Set the Intercept Decision Strategy to use for this policy.

ƒ Intercept Global Component Weights — Set the component weights for each Intercept component for this policy. Each weight must be a number between 0 and 100.

293