Hi,
I've been playing with content filters based on SDR (Sender Domain Reputation). I can see that content filter allow me to filter messages based on general SDR score/verdict. If I do this, the log also contains an additional Threat Category, next to the score/verdict:
Consolidated Sender Reputation: Poor, Threat Category: Malware Sites
I can't seem to find a content filter condition that would allow me to match on the Threat Category. Is this not possible?
I've seen quite a few false positives with SDR verdict "poor". Filtering on the Threat Category instead would allow me more control.
