Message processing rule configuration scenario

You can modify general protection settings that are applied to all message processing rules in the Settings → General section.

1. Creating a rule

   When you create a rule, you must specify sender and recipient addresses, whose messages are to be processed in accordance with the settings of the rule, as well as the message processing mode. Other general settings are optional.

2. Anti-Virus protection of messages

   Kaspersky Secure Mail Gateway scans email messages for viruses and other threats using the Anti-Virus module.

   You can enable or disable Anti-Virus scanning of messages for the rule. If Anti-Virus scan is enabled in the rule, you can configure the scan depending on object type:

   • Infected and probably infected objects, as well as legitimate programs that can be exploited by hackers
   • Objects with errors encountered during scanning
   • Encrypted objects
   • Attachments with macros
3. Link scanning

   Kaspersky Secure Mail Gateway checks if the links in the body of the message are malicious, that is, if they lead to web sites that distribute malware. You can also enable the detection of advertising links and links relevant to legitimate programs.

4. Anti-Spam protection

   Kaspersky Secure Mail Gateway filters messages passing through the mail server to remove unsolicited mail (spam) using the Anti-Spam module.

   You can enable or disable Anti-Spam protection for the rule. If Anti-Spam protection is enabled for a rule, you can configure the scan depending on object type:

   • Spam
   • Probable spam
   • Mass mail
5. Anti-Phishing protection

   Kaspersky Secure Mail Gateway filters messages passing through the mail server to remove phishing using the Anti-Phishing module.

   A type of Internet fraud aimed at obtaining unauthorized access to users' confidential data.

   You can enable or disable Anti-Phishing protection for the rule.

6. Content filtering of messages

   Kaspersky Secure Mail Gateway can perform content filtering of messages that pass through the mail server.

   You can enable or disable Content Filtering for the rule. If Content Filtering is enabled for a rule, you can restrict the relaying of messages by the mail server in accordance with the following criteria:

   • Message size
   • Mask of attachment name
   • Format of attachments
7. Mail Sender Authentication

   Mail Sender Authentication is designed to provide additional protection for your corporate mail infrastructure against spam and phishing.

   Kaspersky Secure Mail Gateway uses the following Mail Sender Authentication technologies:

   • SPF authentication (Sender Policy Framework).

     Comparison of IP addresses of mail senders with the list of possible message sources that has been created by the mail server administrator.

   • DKIM authentication (DomainKeys Identified Mail).

     Verification of the digital signature added to messages.

   • DMARC authentication (Domain-based Message Authentication, Reporting and Conformance).

     Verification that determines the policy and actions taken on messages based on the results of SPF and DKIM Mail Sender Authentication.

8. Notifications of message scan results

   You can set up notifications about message scan events to be emailed to addresses from the configured general list, the sender, recipients, or other addresses.

9. Warnings about insecure messages

   You can configure a Warning template text to be added to the body of the message that has one of the following scan statuses:

   • Encrypted;
   • Infected;
   • Error;
   • Phishing;
   • Links scanning.
10. Email disclaimers

    An email disclaimer (hereinafter also "disclaimer") is a text that the application can add at the end of an email message.

    You can enable or disable disclaimers for one or more message processing rules and configure disclaimer templates.

11. KATA protection

    Kaspersky Secure Mail Gateway can be integrated with Kaspersky Anti Targeted Attack Platform and forward messages to the KATA server for scans.

    You can enable or disable KATA protection for a rule. If KATA protection is enabled in a rule, you can select a specific action for messages in which objects were detected, indicate whether or not the application should place the messages in Backup, and configure a tag to be added to the subject of messages.