Block emails based on URLs contained in body of message

Products

• Email Security.cloud

Issue/Introduction

How to block an email based on URLs or links in the body of an email

Environment

Email Security.cloud

Resolution

Learn how to create a policy in Symantec Email Security.cloud Data Protection to restrict emails based on URL's or Links contained in the message.

Create a policy to block files

• In the Symantec.cloud portal, navigate to Dashboard > Services > Data Protection.
• Create a new Data Protection policy, and configure it as follows:
   
  • Name: Restricted URLs
  • Apply to: Inbound email only. Other options are available, which depend on the scope you desire.
  • Execute if: All rules are met
  • Action: Block and Delete. Other actions are available, which depend on the result you intend.
  • Administrator email: Configure a non-production administrator email address. This must be non-production address because Data Protection policy administrators are automatically whitelisted from all Data Protection policies to avoid mail loops.
  • Notifications: None
     
• Add a new Rule, and configure it as follows:
  • Name: Restricted URLs
  • Set it to: ANY conditions are met
     
  1. Add a new condition, Content URL List.
• Click Create a new URL List.
• Name: Blocked URLs
• Add the URLs that you are wanting to block. There are format instructions and an example list on the "Create a new URL List" page.
• Click "Save" when the URL list is complete.

Configure the condition as follows, to either look for the URLs in the body of emails or in attachments or both.

 

Then select "Save" at the bottom of the Edit Policy page.