Configuring profiles : Configuring content profiles and content action profiles : Configuring content profiles : Configuring content monitor and filtering
Configuring content monitor and filtering
The following procedure is part of the content profile configuration process. For general procedures about how to configure a content profile, see “Configuring content profiles and content action profiles”.
The monitor profile uses the dictionary profile to determine matching email messages, and the actions that will be performed if a match is found.
You can also select to scan MS Office, PDF, or archived email attachments.
To configure a content monitor profile
1. Go to Profile > Content.
2. Click New to create a new profile or double click on an existing profile to edit it.
3. Click the arrow to expand Content Monitor and Filtering.
GUI item
Description
Move
(button)
Mark a check box to select a content monitor profile, then click this button. Choose Up or Down from the pop-up menu.
Content monitor profiles are evaluated for a match in order of their appearance in this list. Usually, content monitor profiles should be ordered from most specific to most general, and from accepting or quarantining to rejecting.
Delete
(button)
Mark a check box to select a content monitor profile, then click this button to remove it.
Note: Deletion does not take effect immediately; it occurs when you save the content profile.
Enable
Select or clear the check box to enable or disable a content monitor.
4. Click New for a new monitor profile or double-click an existing profile to modify it.
A dialog appears.
5. Configure the following:
 
GUI item
Description
Enable
Enable to use the content monitor to inspect email for matching email and perform the configured action.
Dictionary
Select either Profile or Group, then select the name of a dictionary profile or group from the drop-down list next to it.
If no profile or group exists, click New to create one, or select an existing profile or group and click Edit to modify it. A dialog appears.
For information on creating and editing dictionary profiles and groups, see “Configuring dictionary profiles”.
Minimum score
Displays the number of times that an email must match the dictionary profile before it will receive the action configured in Action. Note that the score value is based on individual dictionary profile matches, not the dictionary group matches.
Action
Displays action that the FortiMail unit will perform if the content of the email message matches words or patterns from the dictionary profile.
If no action exists, click New to create one, or select an existing action and click Edit to modify it. A dialog appears.
For information on action profiles, see “Configuring content action profiles”.
Scan Condition
Specify the content type to scan:
PDF files
Microsoft Office files
Archived PDF and MS Office files. If you select this option, you can also use the following CLI commands to specify the maximum levels to decompress and the maximum file size to decompress:
config mailsetting mail-scan-options
set decompress-max-level <level_1-16>
set decompress-max-size <size_in_MB>
end
6. Click Create or OK on the Content Monitor Profile dialog to save and close it.