| #

## Multiple Scan Filters

Feature | Benefits
--- | ---
Attachment Blocking | Block named attachments or block attachments by true file type, file extension, or file name. Active Directory integrated exception rules on Exchange Server 2010 and 2007.
Content Filtering | Use rule-based filters to screen out message content deemed to be offensive or otherwise objectionable. Active Directory integrated policies on Exchange Server 2010 and 2007.
Content Filtering Logs | This version of ScanMail displays the keyword in content filtering logs when there is a match.
| ##### Note If the keyword or regular expression is too long to display, logs display truncated information.
Data Loss Prevention | Use rule-based filters to detect, filter, and mask sensitive data before it transmits out of the network. Select from over 100 predefined templates and data identifiers, or create customized expressions and keyword lists to meet company-specific mandates Create customized rules to block, mask, log, and delete sensitive data transmitting across the network. Create Data Loss Prevention policies and deploy to ScanMail servers from Control Manager 6.0 to ensure that company-wide policies remain consistent across all servers
Spam Prevention Rules | Use spam prevention filters with adjustable sensitivity levels to screen out spam while reducing falsely identified messages. End User Quarantine (EUQ) with Spam Confidence Level (SCL). This version of ScanMail provides "Integrate with Outlook Junk E-mail" and "Integrate with End User Quarantine" solutions. You can select either solution during installation. Junk E-Mail folder. In this version of ScanMail, you can select to send detected Spam messages to the standard Outlook folder. The creation of a separate Spam folder is no longer necessary.
Web Reputation | This version of ScanMail leverages Web Reputation technology, which evaluates the integrity of all requested web pages. Web Reputation features help ensure that the pages that users access are safe and free from web threats, such as malware, spyware, and phishing scams that are designed to trick users into providing personal information. Web Reputation blocks web pages based on their reputation ratings. It queries Trend Micro servers for these ratings, which are correlated from multiple sources, including web page links, domain and IP address relationships, spam sources, and links in spam messages. By obtaining ratings online, Web Reputation uses the latest available information to block harmful pages. Web Reputation helps deter users from following malicious URLs when the feature is enabled. Web reputation queries Trend Micro servers for the reputation rating when an email message with a URL in the message body or message attachment is received. Depending on the configuration, Web Reputation can quarantine, delete, or tag the email message with URLs.
Search & Destroy | Search & Destroy provides administrators the ability to search and remove mailbox components (for example, email messages, meetings, tasks) containing undesirable content from Exchange mailbox servers.
| ##### Note The Search & Destroy feature only provides support for mailbox servers running Exchange 2010 Service Pack 1 or above. The Search & Destroy menu only appears after configuring the Search & Destroy administrator role.
Deep Discovery Advisor integration | Administrators can leverage the Virtual Analyzer in Deep Discovery Advisor to evaluate messages and files in which ATSE detects suspicious behavior. ScanMail sends the suspect files to Deep Discovery Advisor which then performs content simulation and analysis in an isolated virtual environment to identify characteristics commonly associated with many types of malware. After Deep Discovery Advisor completes the analyses, ScanMail receives a report indicating the risk level of the message or file. Administrators can configure ScanMail to perform specific actions on analyzed files based on the company’s security level policy.