WEBVTT

1
00:00.000 --> 00:00.710 align:middle line:84%


2
00:00.710 --> 00:03.170 align:middle line:90%
Based on the reputation
scores of the sender who's

3
00:03.170 --> 00:06.350 align:middle line:90%
sending an email to our
system, much of that email

4
00:06.350 --> 00:07.860 align:middle line:90%
is going to be
dropped right there.

5
00:07.860 --> 00:09.890 align:middle line:90%
However, the traffic that
isn't dropped because

6
00:09.890 --> 00:11.600 align:middle line:90%
of the low reputation
score still

7
00:11.600 --> 00:13.280 align:middle line:90%
has the opportunity
to be dropped

8
00:13.280 --> 00:15.530 align:middle line:90%
if it identifies that the
emails that we're receiving

9
00:15.530 --> 00:17.685 align:middle line:84%
from that sender are spam.

10
00:17.685 --> 00:20.060 align:middle line:90%
And so in this video, I'd like
to chat with you in detail

11
00:20.060 --> 00:23.570 align:middle line:90%
about the options for spam
filtering on the email security

12
00:23.570 --> 00:24.213 align:middle line:84%
appliance.

13
00:24.213 --> 00:26.630 align:middle line:90%
So here on the interface for
the email security appliance,

14
00:26.630 --> 00:29.270 align:middle line:90%
let's start off here
with Security Services,

15
00:29.270 --> 00:31.880 align:middle line:90%
and then under Antispam,
there's the option
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
00:29.270 --> 00:31.880 align:middle line:90%
and then under Antispam,
there's the option

16
00:31.880 --> 00:35.370 align:middle line:90%
for Ironport Antispam,
and let's click on that.

17
00:35.370 --> 00:37.610 align:middle line:90%
So if it's not enabled,
we can click on Edit,

18
00:37.610 --> 00:40.160 align:middle line:90%
and then make sure it's enabled,
and then click on Submit.

19
00:40.160 --> 00:42.713 align:middle line:90%
If we scroll down a little
bit, here we have rule updates,

20
00:42.713 --> 00:44.130 align:middle line:90%
and so I currently
have a license.

21
00:44.130 --> 00:45.860 align:middle line:90%
In fact, let me share
that with you, too.

22
00:45.860 --> 00:48.530 align:middle line:90%
If we go to System
Administration,

23
00:48.530 --> 00:50.630 align:middle line:90%
and we go down to
Feature Keys, that

24
00:50.630 --> 00:52.850 align:middle line:90%
can show you what keys
you have on your system

25
00:52.850 --> 00:54.420 align:middle line:84%
and what features exist.

26
00:54.420 --> 00:58.490 align:middle line:90%
So if we go back to Security
Services and Ironport Antispam,

27
00:58.490 --> 01:01.670 align:middle line:90%
it is enabled, and as a
result of it being enabled,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

27
00:58.490 --> 01:01.670 align:middle line:90%
it is enabled, and as a
result of it being enabled,

28
01:01.670 --> 01:05.269 align:middle line:90%
if we go to our Mail Policies
here, and specify Incoming Mail

29
01:05.269 --> 01:08.885 align:middle line:90%
Policies, under Antispam, it
has the details right here.

30
01:08.885 --> 01:10.760 align:middle line:90%
And if you want to modify
the details of this

31
01:10.760 --> 01:13.323 align:middle line:90%
we can, or we could
add a new policy.

32
01:13.323 --> 01:14.990 align:middle line:90%
So if we add a policy,
it would place it

33
01:14.990 --> 01:18.080 align:middle line:90%
above the default policy, and
we could specify the details

34
01:18.080 --> 01:19.190 align:middle line:84%
for that new policy.

35
01:19.190 --> 01:21.560 align:middle line:90%
Or if we wanted
it for all email,

36
01:21.560 --> 01:23.720 align:middle line:90%
we could just modify
this default policy,

37
01:23.720 --> 01:26.430 align:middle line:90%
and it would apply to everybody
that matched on this policy.

38
01:26.430 --> 01:29.450 align:middle line:90%
So we'll click on Antispam,
and as time goes on or based

39
01:29.450 --> 01:32.480 align:middle line:90%
on the licensing, if you have
multiple antispam services,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

39
01:29.450 --> 01:32.480 align:middle line:90%
on the licensing, if you have
multiple antispam services,

40
01:32.480 --> 01:34.802 align:middle line:90%
you can specify which
ones you want to use.

41
01:34.802 --> 01:36.260 align:middle line:90%
And then we have
options for emails

42
01:36.260 --> 01:39.410 align:middle line:90%
that have been positively
identified or suspected.

43
01:39.410 --> 01:42.170 align:middle line:90%
So emails are going to be
given a score regarding spam,

44
01:42.170 --> 01:43.910 align:middle line:84%
and here is the scale.

45
01:43.910 --> 01:45.260 align:middle line:84%
It's 1 to 100.

46
01:45.260 --> 01:48.390 align:middle line:90%
The higher, the more likely
it is going to be spam,

47
01:48.390 --> 01:50.660 align:middle line:90%
and so here is also the
default thresholds, which

48
01:50.660 --> 01:53.930 align:middle line:90%
are 90 and higher, it
means it's positively spam.

49
01:53.930 --> 01:58.160 align:middle line:90%
And if it's 50 up to 90,
it's suspected spam, and then

50
01:58.160 --> 02:00.240 align:middle line:90%
based on that, we can
specify what we want to do.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

50
01:58.160 --> 02:00.240 align:middle line:90%
based on that, we can
specify what we want to do.

51
02:00.240 --> 02:02.698 align:middle line:90%
So we can change the thresholds
if we want, and then we can

52
02:02.698 --> 02:04.260 align:middle line:84%
specify the actions to take.

53
02:04.260 --> 02:06.450 align:middle line:90%
So if it's definitely spam,
what do you want to do?

54
02:06.450 --> 02:07.700 align:middle line:90%
Do you want to
deliver it anyway?

55
02:07.700 --> 02:08.658 align:middle line:84%
Do you want to drop it?

56
02:08.658 --> 02:09.710 align:middle line:84%
Do you want to bounce it?

57
02:09.710 --> 02:10.710 align:middle line:84%
What do you want to do?

58
02:10.710 --> 02:12.980 align:middle line:90%
And if it is spam,
we can also prepend

59
02:12.980 --> 02:16.085 align:middle line:90%
to the email a message so
that when the user sees it,

60
02:16.085 --> 02:17.960 align:middle line:90%
if we're delivering it,
for example, so we'll

61
02:17.960 --> 02:19.760 align:middle line:90%
say deliver it, and
we could go ahead

62
02:19.760 --> 02:22.940 align:middle line:90%
and prepend the word spam,
and that way they would see it

63
02:22.940 --> 02:24.750 align:middle line:84%
in their inbox as spam.

64
02:24.750 --> 02:27.800 align:middle line:90%
Then we have similar settings
down here for suspected spam.

65
02:27.800 --> 02:29.690 align:middle line:90%
So this alone with
its defaults can just

66
02:29.690 --> 02:33.500 align:middle line:90%
remove tons and tons of spam
from ever reaching your end
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

66
02:29.690 --> 02:33.500 align:middle line:90%
remove tons and tons of spam
from ever reaching your end

67
02:33.500 --> 02:36.120 align:middle line:90%
users mailboxes,
which is a great idea.

68
02:36.120 --> 02:39.030 align:middle line:90%
So I'm going to click on Cancel
and not make any changes there.

69
02:39.030 --> 02:41.780 align:middle line:90%
But again, it's under Mail
Policies, Incoming Mail

70
02:41.780 --> 02:45.087 align:middle line:90%
Policies, and the
Antispam is on by default.

71
02:45.087 --> 02:46.920 align:middle line:90%
If you have a feature
here that's not active

72
02:46.920 --> 02:48.260 align:middle line:90%
and you have a
license for it, you'd

73
02:48.260 --> 02:50.210 align:middle line:90%
want to make sure that
the features enabled,

74
02:50.210 --> 02:53.540 align:middle line:90%
like Security Services
and Ironport Antispam,

75
02:53.540 --> 02:55.567 align:middle line:90%
and make sure that
it's enabled here.

76
02:55.567 --> 02:57.650 align:middle line:90%
So if it's disabled here,
you'd want to enable it.

77
02:57.650 --> 03:00.920 align:middle line:90%
Then go back to your Mail
Policy, Incoming Mail Policy,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

77
02:57.650 --> 03:00.920 align:middle line:90%
Then go back to your Mail
Policy, Incoming Mail Policy,

78
03:00.920 --> 03:03.598 align:middle line:90%
and then verify the details
of it here in your policy.

79
03:03.598 --> 03:05.390 align:middle line:90%
And again, this is just
the default policy.

80
03:05.390 --> 03:07.160 align:middle line:90%
We can click on
Add Policy, and we

81
03:07.160 --> 03:08.600 align:middle line:90%
could add additional
policies that

82
03:08.600 --> 03:10.040 align:middle line:84%
would go above the default.

83
03:10.040 --> 03:12.830 align:middle line:90%
So in this video, we've
taken a look at antispam

84
03:12.830 --> 03:15.830 align:middle line:90%
and how we can enforce that as
a policy on our email security

85
03:15.830 --> 03:16.400 align:middle line:84%
appliance.

86
03:16.400 --> 03:17.817 align:middle line:90%
And in the next
video, we're going

87
03:17.817 --> 03:20.660 align:middle line:90%
to take a look at doing
antivirus protection regarding

88
03:20.660 --> 03:21.658 align:middle line:84%
emails as well.

89
03:21.658 --> 03:23.700 align:middle line:90%
I'll see you in that next
video in just a moment.

90
03:23.700 --> 03:25.970 align:middle line:90%
Meanwhile, I hope this has
been informative for you,

91
03:25.970 --> 03:28.960 align:middle line:90%
and I'd like to thank
you for viewing.