cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.1.0-227
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

863
Views
0
Helpful
1
Replies
daro
Beginner

SBRS reputation filtering and rep. "none"

Hi guys,

quick question about the behaviour of the reputation filtering action.

If I use for example if (reputation <= 2.0) is there reputation score "none" included?


I usually use this action to keep the false positives low, but if I am doing this I might aswell cover the "none" reputation. It would be cool to have an option in the content filter to in- or exclude "none". 

You see, as soon as I want to have an OR I already have to switch to message filters due to the lacking option of nested boolean operators.

 

thanks

Cheers

Daniel

1 ACCEPTED SOLUTION

Accepted Solutions
dmccabej
Cisco Employee

Hello,

 

You can use the if (no reputation) condition via message filter to filter on 'NONE' verdicts. More info and examples can be found within our user guide: here

 

+++

Values for the SenderBase Reputation rule are -10 through 10, but the value NONE may also be returned. To check specifically for the value NONE , use the no-reputation rule.

none_rep:

if (no-reputation) {

strip-header ('Subject');

insert-header ('Subject', '*** Reputation = NONE *** $Subject');

}

+++

Hope that helps! :)

 

Thanks!

-Dennis M.

View solution in original post

1 REPLY 1
dmccabej
Cisco Employee

Hello,

 

You can use the if (no reputation) condition via message filter to filter on 'NONE' verdicts. More info and examples can be found within our user guide: here

 

+++

Values for the SenderBase Reputation rule are -10 through 10, but the value NONE may also be returned. To check specifically for the value NONE , use the no-reputation rule.

none_rep:

if (no-reputation) {

strip-header ('Subject');

insert-header ('Subject', '*** Reputation = NONE *** $Subject');

}

+++

Hope that helps! :)

 

Thanks!

-Dennis M.

Create
Recognize Your Peers
Content for Community-Ad