Default email virus policies

book

Article ID: 179459

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

 

Resolution

Default email virus policies

Symantec Brightmail Gateway installs with pre-configured virus policies. These policies are enabled by default and can be applied to a policy group. You can disable or modify the policy actions and the policy groups to which the policies apply. The policy name, the type of message that the policy applies to, and the condition that must be met cannot be modified for the pre-configured virus policies that are labeled as default.

See Creating email virus policies.

See Selecting virus policies for a policy group.

Table: Default virus policies

Policy name

Applies to the following messages

If the following condition is met

Actions

Applies to the following policy group

Default status

Virus: Clean message (default)

Inbound and outbound messages

Message contains a virus

Clean the message

Default group

Enabled by default

Worm: Delete message (default)

Inbound and outbound messages

Message contains a mass-mailing worm

Delete the message

Default group

Enabled by default

Unscannable: Delete message (default)

Inbound and outbound messages

Message is unscannable for viruses

Delete the message

Default group

Enabled by default

Encrypted Attachment: Modify subject line with "[WARNING - ENCRYPTED ATTACHMENT NOT VIRUS SCANNED]"

Inbound and outbound messages

Message contains an encrypted attachment

Prepend the subject line with "[WARNING - ENCRYPTED ATTACHMENT NOT VIRUS SCANNED]"

Default group

Enabled by default

Virus: Delete message

Inbound and outbound messages

Message contains a virus

Delete the message

None

Enabled by default

Virus: Modify subject line with "[VIRUS INFECTED]"

Inbound and outbound messages

Message contains a virus

Prepend the subject line with "[VIRUS INFECTED]"

None

Enabled by default

Virus: Deliver normally

Inbound and outbound messages

Message contains a virus

Deliver the message normally

None

Enabled by default

Worm: Clean message

Inbound and outbound messages

Message contains a mass-mailing worm

Clean the message

None

Enabled by default

Worm: Modify subject line with "[WORM INFECTED]"

Inbound and outbound messages

Message contains a mass-mailing worm

Prepend the subject line with "[WORM INFECTED]"

None

Enabled by default

Worm: Deliver normally

Inbound and outbound messages

Message contains a mass-mailing worm

Deliver the message normally

None

Enabled by default

Unscannable: Modify subject line with "[WARNING -NOT VIRUS SCANNED]"

Inbound and outbound messages

Message is unscannable for viruses

Prepend the subject line with "[WARNING -NOT VIRUS SCANNED]"

None

Enabled by default

Unscannable: Deliver normally

Inbound and outbound messages

Message is unscannable for viruses

Deliver the message normally

None

Enabled by default

Threat: Modify subject line with "[SPYWARE OR ADWARE INFECTED]" (default)

Inbound and outbound messages

Message contains spyware or adware

See Spyware or adware verdict details.

Prepend the subject line with "[SPYWARE OR ADWARE INFECTED]"

Default group

Enabled by default

Inbound suspect virus: Strip attachments and hold message in Suspect Virus Quarantine (default)

Inbound messages

Message contains a suspicious attachment

Strip and Delay in Suspect Virus Quarantine with message "Parts of your message have been stripped because they were considered suspect."

Default group

Enabled by default

Outbound suspect virus: Hold message in Suspect Virus Quarantine (default)

Outbound messages

Message contains a suspicious attachment

Hold message in Suspect Virus Quarantine

Default group

Enabled by default