Based on the reputation scores of the sender who's
sending an email to our system, much of that email
is going to be dropped right there.
However, the traffic that isn't dropped because
of the low reputation score still
has the opportunity to be dropped
if it identifies that the emails that we're receiving
from that sender are spam.
And so in this video, I'd like to chat with you in detail
about the options for spam filtering on the email security
appliance.
So here on the interface for the email security appliance,
let's start off here with Security Services,
and then under Antispam, there's the option WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and then under Antispam, there's the option
for Ironport Antispam, and let's click on that.
So if it's not enabled, we can click on Edit,
and then make sure it's enabled, and then click on Submit.
If we scroll down a little bit, here we have rule updates,
and so I currently have a license.
In fact, let me share that with you, too.
If we go to System Administration,
and we go down to Feature Keys, that
can show you what keys you have on your system
and what features exist.
So if we go back to Security Services and Ironport Antispam,
it is enabled, and as a result of it being enabled, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
it is enabled, and as a result of it being enabled,
if we go to our Mail Policies here, and specify Incoming Mail
Policies, under Antispam, it has the details right here.
And if you want to modify the details of this
we can, or we could add a new policy.
So if we add a policy, it would place it
above the default policy, and we could specify the details
for that new policy.
Or if we wanted it for all email,
we could just modify this default policy,
and it would apply to everybody that matched on this policy.
So we'll click on Antispam, and as time goes on or based
on the licensing, if you have multiple antispam services, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
on the licensing, if you have multiple antispam services,
you can specify which ones you want to use.
And then we have options for emails
that have been positively identified or suspected.
So emails are going to be given a score regarding spam,
and here is the scale.
It's 1 to 100.
The higher, the more likely it is going to be spam,
and so here is also the default thresholds, which
are 90 and higher, it means it's positively spam.
And if it's 50 up to 90, it's suspected spam, and then
based on that, we can specify what we want to do. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
based on that, we can specify what we want to do.
So we can change the thresholds if we want, and then we can
specify the actions to take.
So if it's definitely spam, what do you want to do?
Do you want to deliver it anyway?
Do you want to drop it?
Do you want to bounce it?
What do you want to do?
And if it is spam, we can also prepend
to the email a message so that when the user sees it,
if we're delivering it, for example, so we'll
say deliver it, and we could go ahead
and prepend the word spam, and that way they would see it
in their inbox as spam.
Then we have similar settings down here for suspected spam.
So this alone with its defaults can just
remove tons and tons of spam from ever reaching your end WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
remove tons and tons of spam from ever reaching your end
users mailboxes, which is a great idea.
So I'm going to click on Cancel and not make any changes there.
But again, it's under Mail Policies, Incoming Mail
Policies, and the Antispam is on by default.
If you have a feature here that's not active
and you have a license for it, you'd
want to make sure that the features enabled,
like Security Services and Ironport Antispam,
and make sure that it's enabled here.
So if it's disabled here, you'd want to enable it.
Then go back to your Mail Policy, Incoming Mail Policy, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Then go back to your Mail Policy, Incoming Mail Policy,
and then verify the details of it here in your policy.
And again, this is just the default policy.
We can click on Add Policy, and we
could add additional policies that
would go above the default.
So in this video, we've taken a look at antispam
and how we can enforce that as a policy on our email security
appliance.
And in the next video, we're going
to take a look at doing antivirus protection regarding
emails as well.
I'll see you in that next video in just a moment.
Meanwhile, I hope this has been informative for you,
and I'd like to thank you for viewing.