Configuring the final action to take on a message

The final action on a message in the Content Filtering module is determined as follows:

1. The application determines which of the active expressions in the rule were triggered.
2. Among the actions of the triggered expressions, the application selects the final action depending on the configured message processing mode and in accordance with the table below.

   Action that the Content Filtering module applies to the message

   Number of triggered expressions in the rule	Message processing mode	Final action that the Content Filtering module applies to the message
   One	Apply the action of the expression with the highest priority, ignore other expressions Apply the strictest of the actions of all matched expressions	The following actions are applied: Action on the message specified in the triggered expression: Skip, Reject, Delete attachment, or Delete message. If the assigned action is Delete attachment, the application determines the list of attachments to be deleted (see the table below). Placing the message in Backup if the Put original message to Backup toggle switch is enabled in the expression. Adding text to the subject of the message if the Text to add to message subject toggle switch is enabled in the expression.
   More than one	Apply the action of the expression with the highest priority, ignore other expressions	The following actions are applied: Action on the message specified in the triggered expression with the highest priority: Skip, Reject, Delete attachment, or Delete message. If the assigned action is Delete attachment, the application determines the list of attachments to be deleted (see the table below). Placing the message in Backup if the Put original message to Backup toggle switch is enabled in the expression. Adding text to the subject of the message if the Text to add to message subject toggle switch is enabled in the expression.
   	Apply the strictest of the actions of all matched expressions	The following actions are applied: The strictest among the actions in the triggered expressions: Delete message, Reject, Delete attachment, or Skip. If the assigned action is Delete attachment, the application determines the list of attachments to be deleted (see the table below). Placing the message in Backup, if the Put original message to Backup toggle switch is enabled in at least one triggered expression with the strictest action. Adding text to the subject if the Text to add to message subject toggle switch is enabled in at least one triggered expression with the strictest action. If this toggle switch is enabled in multiple expressions with the strictest action, all texts specified in these expressions are added to the subject line. Duplicate texts are not added. Checking text for duplicates is case-sensitive.

If an expression with the Delete attachment action is triggered, the list of attachments to be deleted is determined in accordance with the table below. If the triggered expression does not contain conditions for the Attachment type and Attachment name attributes, the attachments are not marked for deletion. If, as a result of a scan by all modules, the message is assigned Delete attachment as the final action, and the list of attachments to be deleted is empty, Skipped is displayed as the final action for this message in the Backup and the email traffic processing event log. This does not change the strictness of triggered actions, and the configured actions are applied for headers and subject of the message.

Determining attachments to be deleted

The final action that the Content Filtering module applies to the message in case of a scan error includes the following actions:

1. Applying the action configured for the Content Filtering module error.
2. Placing the message in Backup if the Put original message to Backup toggle switch is enabled.
3. Adding text to the subject if the Text to add to message subject toggle switch is enabled.