cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1004
Views
0
Helpful
1
Replies

ESA content filter

chauvauxalain
Level 1
Level 1

Hi All,

 

I am new with ESA and I am trying to block all incoming emails containing the string "BTC" and "wallet"".

I have created a content filter with condition body-contains. I have tried all combinations of these 2 words like :

 

"(?i)wallet AND (?i)btc"

"(?i)wallet" AND "(?i)btc"

(?i)wallet AND (?i)btc

 

But none of these conditions are working.

What is the correct syntax ?

Any help would be highly appreciated.

 

Thx in advance for your support

 

ESA_Content_Filter.jpg

1 Reply 1

dmccabej
Cisco Employee
Cisco Employee

Hello,

 

Our filters utilize python flavor regular expression. I normally test using RegEx101 as it goes detail regarding how/why something matches and provides examples. 

 

You can use something like this :

 

(?i)(btc|wallet)

 

Thanks!

-Dennis M.