Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Content Filer logs

I have created a contect filter to block out Adult rated phrases. I have created a dictionary that contains about 400 phrases that we hace compiled over the years. I created a inbound content filter to to BCC messages that match the "Adult Content" dictionary. However, when I review the items that are being BCC'd I am seeing messages that should have not triggered the content filter.

Is there a way to see in the logs what word or words was causing the content filter to fire?
I have lookd some but culdn't find anything.

Thanks

3 REPLIES
New Member

Re: Content Filer logs

A Testing method is to add an action of Quarantine to the Policy area, and then duplicate the message. That way you can see what words have triggered the content filter and the mail will also be delivered.
Just make sure that you delete messages from the quarantine area and not deliver otherwise the receipient will receive 2 copies :D

P.S. Make sure that your dictionary has got the "Match Whole Words" ticked otherwise you could be getting variants of the words

New Member

Re: Content Filer logs

Is there a way to see in the logs what word or words was causing the content filter to fire?
I have lookd some but culdn't find anything.

Thanks


Recent versions of AsyncOS (as of 5.5?) have a $MatchedContent variable. With a bcc you're limited to using this in the Subject, but if you used notify with a copy of the original message attached, it could go in the notification template.

New Member

Re: Content Filer logs

Thanks Irosenstein, This did the trick. I found what was triggering the policy and corrected the dictionary and everything is working fine now.

Ironport Nation Rocks!

Thanks everyone.

176
Views
0
Helpful
3
Replies
CreatePlease to create content