A content filtering rule consists of one or more conditions that you define. For example, a condition might be that an email subject line contains one or more words from a subject line match list. A rule can optionally contain one or more exceptions.
Mail Security uses OR (Match any term) and AND (Match all terms) conditions to create a framework in which to evaluate email messages or email messages and their attachments. By default, content filtering rules are set to Match any term for the entries in the Content list. This means that the rule triggers a violation if any of the entries are present and all of the other criteria that you configured are met. If you select Match all terms, then the rule only triggers a violation if all the items in the Content list are present and all other rule criteria that you configure are met. "Match any terms" is the only condition available for the entries in the Unless list.
To configure the conditions of a content filtering rule
In the console on the primary navigation bar, click Policies.
In the sidebar under Content Enforcement, click Content Filtering Rules.
Do one of the following:
On the Rule tab, define the conditions for the content filtering rule.
Do any of the following:
Configure the remaining components of the content filtering rule.
Click OK and then click Deploy Changes.