cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
617
Views
0
Helpful
2
Replies

hyper link to text

rockbd
Level 1
Level 1

Dear All

Hope you all are doing good.

I want to make the hyperlinks in the main body text non clickable. Like https://www.cisco.com will cisco.com.

Any idea how I can do that in Email Security?

 

2 Replies 2

Andres Vega
Cisco Employee
Cisco Employee

Hello, 

It is possible to make URLs unclickable by configuring message filters or content filters with the action "defang",  the following is an example of a filter to defang all the URLs in the body or subject of an email with an unknown reputation, and I recommend to evaluate its impact before deploying it. 

 URL_defang_example:
     if (url-no-reputation("" , 0, 1)) { url-no-reputation-defang("",0); }

Screenshot 2022-09-07 at 15.35.55.png

Of course you can also apply action to attachments, however for documents like Excel, Word, and PDF I would suggest to explore the Safeprint option since it can also disable macros and Java scripts contained on those types of files. 

Finally, and not less important, I recommend enabling within the Outbreak Filter configuration the URL rewriting option for all messages, that are triggering Outbreak rules. It will help you to improve the efficacy of your security environment.

Regards, 

Andres

Udupi Krishna.
Cisco Employee
Cisco Employee

If URL filtering is enabled, you can use URL defang action and the option's primary purpose is to make a link un clickable. It doesn't exactly change www.cisco.com to cisco.com, it rather uses a different approach. E.g. it would change www.cisco.com to something like cisco[.]com.

Few things to consider, 

1. Content or messages filters should be used to enforce URL defang action.

2. The condition to force a URL defang action can either be based on URL reputation score or the category.

3. If the requirement is to make all URL(s) un clickable regardless of them being good or bad, you may wanna use URL reputation and consider covering the whole reputation score range (-10 to +10) to scan all URL(s) in an email and enforce action.

4. There may be URL(s) that wouldn't have a score, in such cases use the "unknown" score option additionally to enforce URL defang.

Test this out for a limited range of scores or apply the filter to specific sender or recipient. Verify the outcome and expand it to all emails.