Content Examination - Policy

This article contains information on configuring a Content Examination policy in Mimecast, detailing steps for setting options, email criteria, validity, and saving the policy for email security management.

For details on configuring a Content Examination definition, see the Content Examination - Definitions page.

To configure a Content Examination policy:

1. Log on to the Mimecast Administration Console.
2. Navigate to Gateway | Policies | Content Examination. A list of policies is displayed.
3. Either click on the following:

• • • New Policy button to create a policy.
    • Policy to be changed.

4. Complete the Options section as required:

Field / Option	Description
Policy Narrative	Describe the policy to enable you to identify it. This is appended to messages in the archive that have the policy applied.
Select Option	Select a Content Examination Definition to use with the policy: Click on the Lookup button to display a list of Content Examination definitions. Click on the Select link to the left of the definition to be applied when this policy is triggered.
Preview	This field lets you preview the definition selected in the "Select Option" field. Click on the  icon to display a read-only version of the definition. Click on the Go Back button to return to the policy.

5. Complete the Emails From and Emails To sections as required:

Field/Option	Description
Addresses Based On	Specify the email address characteristics the policy is based on. This option is only available in the "Emails From" section. The options are: The Return Address (Mail Envelope From): This default setting applies the policy to the SMTP address match based on the message's envelope or true address (i.e., the address used during SMTP transmission). The Message From Address (Message Header From): This applies the policy based on the masked address used in the message's header. Both: Applies the policy based on the Mail Envelope or the Message Header From, whichever matches. If both match, the specified value of the Message Header From is used.
Applies From / To	Specify the sender characteristics the policy is based on. For multiple policies, you should apply them from the most to least specific. The options are: Everyone: Includes all internal and external users. This option is only available in the "Emails From" section. Internal Address: Includes only internal addresses. External Address: Includes only external addresses. This option is only available in the "Emails From" section. Email Domain: This enables you to specify a domain name to which this policy is applied. The domain name is entered in the Specifically field. Address Groups: This enables you to specify a directory or local group. If this option is selected, click the Lookup button to select a group from the Profile Group field. Once a group has been selected, click the Show Location field to display the group's path. Address Attributes: This enables you to specify a predefined attribute. The attribute is selected from the Where Attribute drop-down list. Once the attribute is specified, an attribute value must be entered in the Is Equal To field. This can only be used if attributes have been configured for user accounts. Individual Email Address: This enables you to specify an SMTP address. The email address is entered in the Specifically field.

6. Complete the Validity section as required:

   Field/ Option	Description
   Enable / Disable	Enables (default) or disables the policy. If a date range is specified, the policy is automatically disabled when the end of the date range is reached.
   Set Policy as Perpetual	If the policy's date range has no end date, this field displays "Always On," meaning the policy never expires.
   Date Range	Specify a start and/or end date for the policy. If Eternal is selected, no date is required.
   Policy Override	This overrides the default order in that policies are applied. If there are multiple applicable policies, this policy is applied first unless more specific policies of the same type are configured with an override.
   Bi-Directional	If selected, the policy is applied when the policy's recipient is the sender, and the sender is the recipient.
   Source IP Ranges (n.n.n.n/x)	Enter any required Source IP Ranges for the policy. These only apply if the source IP address used to transmit the message data falls inside or matches the range(s) configured. IP ranges should be entered in CIDR notation.

7. Select the Save and Exit button.

See Also...

• • • Content Examination - Getting Started
    • Content Examination - Configuring