Procedure

1. Configure Intercept settings.

   Tip Trend Micro recommends selecting Quarantine as the default action for messages detected by ATSE. IMSVA stores suspicious messages in Quarantine to allow Virtual Analyzer to complete its analysis.

   Option	Description
   Do not intercept messages	This specific rule does not intercept messages. If there are other rules, IMSVA will process the message. If there are no rules, IMSVA passes the message to your network.
   Delete entire message	Deletes the message and all attachments.
   Quarantine to	IMSVA puts the message and its attachments into the quarantine area that you select from the drop-down box.
   Change recipient to	IMSVA sends the message to another recipient. Specify the recipient email address and separate multiple recipients with a semicolon (;).
   Handoff	IMSVA hands off the message to a specific mail server. Select Handoff if you have a secure messaging server on your network that can process or handle the message. Configure the following: Next to Host, specify the FQDN or IP address of the mail server. Next to Port, specify the port number through which the mail server receives email traffic. Note IMSVA can only track a message before it is handed off. After the handoff, the message is not traceable anymore as it is no longer within the control of IMSVA.

2. Configure Modify settings.

   Note Options under If IMSVA finds a virus are only available for Antivirus rules.

   Option	Description
   If IMSVA finds a virus	Select the check box to enable actions if IMSVA finds a virus or other malware, and then click one of the following: Use ActiveAction: Enable IMSVA to automatically use pre-configured scan actions for specific types of viruses/malware. Attempt to clean attachments. If unable to clean: Select an action for IMSVA to take if it cannot clean the attachment: Delete matching attachment: Remove only the attachments with viruses/malware. Delete all attachments: Remove all attachments. Delete attachments: Select an action for IMSVA to take. Delete matching attachment: Remove only the attachment with viruses/malware. Delete all attachments: Remove all attachments.
   Insert X-header	Inserts a user-specified message to the header of messages. Note If you configure multiple rules to add an x-header, the X-header appears only once in the message. The X-header appears as configured in the last rule.
   Insert stamp in body	Insert text at the beginning or end of the message. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps.
   Insert stamp in clean email messages	Insert text into clean messages signifying that the message is safe. From the drop-down box, select the name of the stamp to insert or click Edit to go to the Stamps screen and manage your stamps. Note The Insert safe stamp for clean mails option is not available on the Special Viruses tab.
   Tag subject	Add text to the subject line of the message. Click Tag subject to edit the tag.
   Postpone delivery to	Delay delivery until a specified hour of the day. Select the hour of the day and minutes from the drop-down boxes.

3. Configure Monitor settings.

   Option	Description
   Send policy notifications	Send an message to one or more recipients. To select a type of notification, click Send policy notifications. For instructions on creating notifications, see Notifications.
   Archive modified to	Archive the message to an archive area.
   BCC	Blind carbon copy the message to another recipient. Specify the recipient's email address and separate multiple addresses with a semicolon (;). Select the BCC option to prevent the intended recipients from seeing the new recipient.