The users are suddenly receiving a large amount of unsolicited emails as the result of political or social advocacy campaigns. Although these emails are legitimate and therefore are not blocked by the Anti-Spam protection, they can fill up users’ inboxes. One approach to managing these emails is to use the Email Security Cloud’s scan-time policy feature in conjunction with Email Quarantine.
Email Security.Cloud
Users are being targeted with unsolicited email as the result of a political or social campaign
To create a policy blocking messages having Political/Social Advocacy categories in the body, proceed with the following steps:
From the dashboard, navigate to Email Services > Scan-time Protection Policy and select the Add button on the far right.
Set Enabled to on.
In the drop-down box under the word IF, select the condition Body URL Category.
Using the Selection box. either search for and select "Political/Social Advocacy" or scroll down and select it. You may add multiple other categories by selecting them as well.
Click the X in the top right of the selection box to exit the selection process. This will save the selected items.
In the THEN selection box, the default selection is Log. You may also wish to set the action to Log or Quarantine to assess the full impact of the policy before selecting other actions. If setting to Log or Quarantine, set the Exit Policy Evaluation to on. Note that by setting the policy to Quarantine, the email will be accessible to users via the Email Quarantine portal if it has been enabled.
At this point the Policy will have a name in the format "If Body URL Category Is In (Political/Social Advocacy) Then Action" ( by default Log).
Scroll to the top and select the Save button to create the policy.