Preventing Symantec Mail Security for Microsoft Exchange from sending quarantine notifications when a content filtering rule is violated

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

How to prevent Symantec Mail Security for Microsoft Exchange from sending Quarantine replacement text when a content filtering rule is violated.

Symptoms
An attachment was quarantined because it violated a Content Filtering Rule and the end user received "Replacement Text" that you do not want them to see.

 

Cause

Content filtering rule is set to action "Quarantine attachment/message body and replace with text"

Resolution

The rule always sends the quarantine notification.

 

Workaround

Use one of the following workarounds:

• Configure the action for the rule in question to "Delete entire message" and no notification is generated.

 

• Configure a rule to delete the quarantine notification.
  
  
  This notification is based on the Quarantine once any new items are received to the Quarantine.
  
  - Set your Actual Action Rule as the screenshot below:
  
  
  
  - Now create a new Rule which would trigger for this exact body content as show above.
  
  
  
  
  - Set the action to 'Delete the entire Message'
  
  
  
  
  This Second rule would trigger the Notification which should have being received by end-user from the Quarantine.