How to Modify the Click-time Protection Policy for URL Risk Scores in Symantec Email Security.cloud

Products

• Email Security.cloud

Issue/Introduction

This article describes the steps to modify the Click-time Protection Policy for URL Risk Scores in Symantec Email Security.cloud

Environment

Email Security.cloud

Resolution

The default Click-time policy rules for URL Risk Score is If URL Risk Score > 3, then Pass to Isolation.

If you want to modify the default URL Risk Scores and their actions then follow the below steps :

• Navigate to  Services > Email Threat Detection and Response > Click-time Protection Policy.
• Search for rule name If URL Risk Score > 3 Then Isolate.
• Click on Edit button under Modify section.

• Now you can select the Risk Scores between 1-10.
• Also can modify the Action as well.

You can also refer the KB article to know more about the URL Risk Scores.