06-09-2016 03:14 PM
I am wondering if there is a way that an email alert can be generated whenever a message is dropped by AMP.
Any insight will be helpful. Thank you in advance!
Solved! Go to Solution.
06-09-2016 05:13 PM
Hello Anotthak,
The only option I can think of is, set Malicious AMP to 'deliver' but add a header.
Then add a content filter to look for this header, and send a notification to your administrator or so and drop the email after.
However I had noted an issue when this is used, if the email gets sent to the AMP quarantine and released for the AMP rescan, if it's deemed malicious, it will deliver the email as is - this is because a second rescan would not put the email through the content filters again.
Regards,
Matthew
06-09-2016 05:13 PM
Hello Anotthak,
The only option I can think of is, set Malicious AMP to 'deliver' but add a header.
Then add a content filter to look for this header, and send a notification to your administrator or so and drop the email after.
However I had noted an issue when this is used, if the email gets sent to the AMP quarantine and released for the AMP rescan, if it's deemed malicious, it will deliver the email as is - this is because a second rescan would not put the email through the content filters again.
Regards,
Matthew
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide