Mail Security can detect security risks. Security risks are the programs that do any of the following:
Provide unauthorized access to computer
Compromise data integrity, privacy, confidentiality, or security
Present some type of disruption or nuisance
These programs can put your employees and your organization at risk for the following:
Identity theft or fraud by logging keystrokes
Capture of email and instant messaging traffic
Theft of personal information such as passwords and login identifications
Security risks can be introduced into your computer unknowingly when users visit a website, download shareware, or freeware software programs, click links or attachments in email messages, or through instant messaging clients. They can also be installed after or as a by-product of accepting an End User License Agreement from another software program that is related to or linked in some way to the security risk.
Enable Security Risk Rule for Mail Security to detect security risks.
Table: Security risk categories lists the categories of security risks that Mail Security detects.
Table: Security risk categories
To configure a security risk detection
In the console on the primary navigation bar, click Policies.
In the sidebar under Antivirus, click Antivirus Settings.
In the content area, in the Rules table, on the Security Risk Rule row, click the box under the Status column, and then select Enabled from the drop-down menu.
This rule is enabled by default.
In the preview pane, in the Action to take list, use the drop-down menu to select the action to take when a security risk is detected.
In the Replacement text box, type your customized message if you want to replace the message or the attachment body with a text message.
The default text is: Symantec Mail Security replaced %attachment% with this text message. The original file contained %violation% and was %action%.
You can use variables in your customized text.
Check one or more of the following to send email notifications about the detection:
Notify administrators
Click the down arrow and type your customized text in the Subject line box and the Message body box. The default Subject line and Message body text is as follows:
Default subject line text: Administrator Alert: Symantec Mail Security detected %violation%
Default message body text: Location of the infected item: %location% Sender of the infected item: %sender% Subject of the message: %subject% The attachment(s) "%attachment%" was %action% for the following reasons: %information% This was done due to the following Symantec Mail Security settings: Scan: %scan% Rule: %rule%
Notify internal sender
Click the down arrow and type your customized text in the Subject line box and the Message body box. The default Subject line and Message body text is as follows:
Notify external sender
Click the down arrow and type your customized text in the Subject line box and the Message body box. The default Subject line and Message body text is as follows:
On the toolbar, click Deploy changes to apply your changes.