Testing in lab with the mentioned partial URL in email body and dictionary containing the d word.
With match whole words unchecked -> Email was quarantined
With match whole words checked -> Email was delivered
I tested it on Async OS 13.0, howeve...
ESA/SMA hardware appliances do not have encrypted disks.
They do have restricted access to the system – there is no direct access to the databases or disk partitions on the system. The only access is through the user interface.
The domain tags influence scoring and can be used for creating rules as well. There isn't a limit of tags needed to start enforcement.
Below user guide has details on how domain tagging works, page 132
In lab, password protected PDF get detected as expected for a sample file I used.
You may want to open a TAC case with the configuration details and sample you are testing with.
Also, please ensure the device is able to fetch updates as expected. T...