How do I create filter based on attachment or link in mail

[Ian Fox]

I am looking to create a content/message filter that will insert a disclaimer in a mail if the original mail contains an attachment or a URL link. How can I do that?

[Mathew Huynh]

Hello Ian,

The ESA does not have a feature to check if an attachment exists or not, so we'll need to run a scanner to look for a '.' within attachment names (or another character, or a range if you will) -> [a-z]

You can do this requirement by the following:

Content filter:

Create a new content filter

Condition -> attachment file name -> contains -> \.

Condition 2 -> Body contains -> (?i)(http|url|www)

Action:

Add Disclaimer

Then submit this filter for usage on your policies.

commit changes.

Message Filter:

CLI > filters > new

Syntax would be:

Add_Disclaimer:
if (attachment-filename == "\\.") OR (only-body-contains("(?i)(http|url|www)", 1))
{
add-footer("My_Footer");
}
.

press enter 2x

then commit changes

Regards,

Matthew

[Ian Fox]

Thanks Matthew. That's what I thought but wanted confirmation.