How to create a content filtering rule to scan messages already in the Exchange Information Store using Symantec Mail Security for Microsoft Exchange

book

Article ID: 177872

calendar_today

Updated On:

Products

Mail Security for Microsoft Exchange

Issue/Introduction

You want to create a Content Filter Rule and apply the rule to all mailboxes on the Exchange Server.
For example, you want to create a content filtering rule to detect a particular category of subject-line violations that are associated with a new threat, and then run the scan immediately.

Symptoms
Content filtering is not picking up violations already in the store, even though the content filtering rule is set to scan "Internal messages (store)."


 

Cause

Content filtering will not be applied against items already in the store unless a scan of some type is triggered against the item.

Resolution

Create a content filtering rule, and then apply that rule to a manual scan.

To enable content filtering scanning:

  1. In the Mail Security console, Navigate to Policies, Content Filtering Rules
  2. Check Enable content filtering. (This option is enabled by default.)
  3. Do any one of the following:
    • To add a new content filtering rule, on the toolbar, click Add new.
    • To modify an existing content filtering rule, on the toolbar, click Edit rule.
  4. Insure you have set the rule you create or modify to apply to the Internal message (store).
  5. Click Finish.
  6. On the toolbar, click Deploy changes to apply your changes.

To apply content filtering to a manual scan:
 

  1. Navigate to Scans, and then click "Edit manual scan..."
  2. In the resulting manual scan wizard, select the options you would like for the manual scan and click Next.
  3. Select the mailboxes you would like to apply the scan to, and click Next.
  4. Enable the rule you would like to apply against existing messages in the message store, and click Finish.
  5. Click Deploy changes, and then "Run now".

Your content filtering rule will be applied to the internal message store as the scan proceeds.