WSM User Guide - WatchGuard Technologies
WSM User Guide - WatchGuard Technologies WSM User Guide - WatchGuard Technologies
Creating Rules for Bulk and Suspect E-mail on E-mail Clients4 If you want to record log messages for a spamBlocker response, select the Log check box for theaction. If you do not want to record log messages, clear the Log check box.5 Make sure DNS is enabled on the Firebox that applies spamBlocker rules.NoteIf you have any perimeter firewall between the Firebox that uses spamBlocker and the Internet, it mustnot block HTTP traffic. The HTTP protocol is used to send requests from the Firebox to the spamBlockerserver.Adding spamBlocker exceptionsAt times, the Firebox identifies a message as spam when it is not spam. If you know the address of thesender, you can configure the Firebox with an exception that tells the Firebox not to examine messagesfrom this source address. To look for exceptions, spamBlocker looks at the “mail from:” field. It does notlook at the “From:” header that you see in e-mails. If you create an exception rule and it does not operatecorrectly, make sure you verify that you entered the correct field.1 From the Exceptions block of the spamBlocker Configuration dialog box, click Add.The Add Exception Rule dialog box appears.2 Select a rule action: Allow, Tag subject, or Deny.3 Type a sender, recipient, or both. You can type the full e-mail name or use wildcards.Creating Rules for Bulk and Suspect E-mail on E-mail ClientsMany network administrators allow e-mail that is not confirmed as spam to be delivered to the destinede-mail recipient. They then set up rules in their e-mail client software to have any e-mail tagged as suspector bulk e-mail put into a special folder on the e-mail client. The procedure below gives instructionson how to configure the Microsoft Outlook e-mail client. For information about how to use this procedureon other types of e-mail clients, look at the user documentation for those products.Sending spam or bulk e-mail to special folders in OutlookThis procedure shows you the steps to create rules for bulk and suspect e-mail in Microsoft Outlook. Youcan have e-mail with a “spam” or “bulk” tag delivered directly to special folders in Outlook. When youcreate these folders, you keep possible spam e-mail out of your usual Outlook folders, but you can getaccess to the e-mail if it becomes necessary.If you use another e-mail client, check your user documentation for that product.304 WatchGuard System Manager
Reporting False Positives and False NegativesBefore you start, make sure that you set the action for spam and bulk e-mail to Add Subject Tag. Youcan use the default tags, or create custom tags. The steps below describe how to create folders with thedefault tags.1 From your Outlook Inbox, select Tools > Rules and Alerts.2 Click New Rule to start the Rules wizard.3 Select Start from a blank rule.4 Select Check messages when they arrive. Click Next.5 Select the condition check box: when specific words in the subject. Then, in the bottom pane, editthe rule description by clicking on the specific words. In the Search Text dialog box, type the spamtag as ***SPAM***. If you use a custom tag, type it here instead. Click Add. Click OK.6 Click Next.7 The wizard asks what you want to do with the message. Select the move it to the specified foldercheck box. Then, in the bottom pane, click the word specified to select the destination folder.8 In the Choose a Folder dialog box, click New. In the folder name field, type Spam. Click OK.9 Click Next two times.10 To complete the rule setup, type a name for your spam rule. Click Finish.11 Click Apply.12 Repeat these steps to create a rule for bulk e-mail, using the bulk e-mail tag. You can send bulk e-mail to the same folder, or create a separate folder for bulk e-mail.Reporting False Positives and False NegativesA false positive e-mail message is a legitimate message that spamBlocker incorrectly identifies asspam. A false negative e-mail message is a spam message that spamBlocker does not correctly identifyas spam. If you find a false positive or false negative e-mail, you can report the classification errordirectly to Commtouch. You must have access to the e-mail message to submit the report. To learn howto submit a report for a false positive or false negative, go to:https://www.watchguard.com/support/advancedfaqs/fw_spam-report.aspMonitoring spamBlocker ActivityYou can use Firebox® System Manager to monitor spamBlocker activity.1 From WatchGuard® System Manager, select the Firebox whose spamBlocker activity you want tomonitor.2 Select Tools > Firebox System Manager.Or,you can click the Firebox System Manager icon on the WatchGuard System Manager toolbar.User Guide 305
- Page 272 and 273: Working with Devices on a Managemen
- Page 274 and 275: Working with Devices on a Managemen
- Page 276 and 277: Working with Devices on a Managemen
- Page 278 and 279: Scheduling Firebox X Edge Firmware
- Page 280 and 281: Using the Firebox X Edge Management
- Page 282 and 283: Using the Firebox X Edge Management
- Page 284 and 285: Using the Firebox SOHO 6 Management
- Page 286 and 287: Creating and Applying Edge Configur
- Page 288 and 289: Creating and Applying Edge Configur
- Page 290 and 291: Creating and Applying Edge Configur
- Page 292 and 293: Managing Firebox X Edge Network Set
- Page 294 and 295: Using AliasesNaming aliases on the
- Page 296 and 297: Using Aliases3 Click Aliases.The al
- Page 298 and 299: Configuring WINS and DNS Servers•
- Page 300 and 301: Adding New Users to the PPTP_Users
- Page 302 and 303: Preparing the Client Computers- To:
- Page 304 and 305: Creating and Connecting a PPTP RUVP
- Page 306 and 307: Creating and Connecting a PPTP RUVP
- Page 308 and 309: Getting Started with WebBlocker4 In
- Page 310 and 311: Activating WebBlocker4 Click Next.5
- Page 312 and 313: Configuring WebBlocker2 Select the
- Page 314 and 315: Configuring WebBlocker3 Click the A
- Page 316 and 317: Scheduling a WebBlocker Action298 W
- Page 318 and 319: Installing the Software Licensespam
- Page 320 and 321: Activating spamBlocker3 From Policy
- Page 324 and 325: Customizing spamBlocker Using Multi
- Page 326 and 327: Installing the Software LicensesIns
- Page 328 and 329: Configuring Gateway AntiVirusConfig
- Page 330 and 331: Configuring Gateway AntiVirus2 To s
- Page 332 and 333: Activating Intrusion Prevention (IP
- Page 334 and 335: Configuring Intrusion PreventionCon
- Page 336 and 337: Configuring Intrusion Prevention2 S
- Page 338 and 339: Configuring Intrusion PreventionCon
- Page 340 and 341: Getting Intrusion Prevention Servic
- Page 342 and 343: Creating QoS Actionsmanagement syst
- Page 344 and 345: Dynamic RoutingDynamic RoutingA rou
- Page 346 and 347: Using RIPSection Command Descriptio
- Page 348 and 349: Using RIP2 In the New Policy Proper
- Page 350 and 351: Using OSPF2 In the New Policy Prope
- Page 352 and 353: Using OSPFSection Command Descripti
- Page 354 and 355: Using OSPF4 Click Import to import
- Page 356 and 357: Using BGPRegion Registry Name Web S
- Page 358 and 359: Using BGPConfiguring Fireware Pro t
- Page 360 and 361: Using BGP342 WatchGuard System Mana
- Page 362 and 363: Selecting a Primary High Availabili
- Page 364 and 365: Configuring HA for Firebox X (non e
- Page 366 and 367: Upgrading Software in an HA Configu
- Page 368 and 369: (B) To use the SOFTWARE PRODUCT on
- Page 370 and 371: RENEWAL/UPGRADE REQUEST WILL NOT BE
Creating Rules for Bulk and Suspect E-mail on E-mail Clients4 If you want to record log messages for a spamBlocker response, select the Log check box for theaction. If you do not want to record log messages, clear the Log check box.5 Make sure DNS is enabled on the Firebox that applies spamBlocker rules.NoteIf you have any perimeter firewall between the Firebox that uses spamBlocker and the Internet, it mustnot block HTTP traffic. The HTTP protocol is used to send requests from the Firebox to the spamBlockerserver.Adding spamBlocker exceptionsAt times, the Firebox identifies a message as spam when it is not spam. If you know the address of thesender, you can configure the Firebox with an exception that tells the Firebox not to examine messagesfrom this source address. To look for exceptions, spamBlocker looks at the “mail from:” field. It does notlook at the “From:” header that you see in e-mails. If you create an exception rule and it does not operatecorrectly, make sure you verify that you entered the correct field.1 From the Exceptions block of the spamBlocker Configuration dialog box, click Add.The Add Exception Rule dialog box appears.2 Select a rule action: Allow, Tag subject, or Deny.3 Type a sender, recipient, or both. You can type the full e-mail name or use wildcards.Creating Rules for Bulk and Suspect E-mail on E-mail ClientsMany network administrators allow e-mail that is not confirmed as spam to be delivered to the destinede-mail recipient. They then set up rules in their e-mail client software to have any e-mail tagged as suspector bulk e-mail put into a special folder on the e-mail client. The procedure below gives instructionson how to configure the Microsoft Outlook e-mail client. For information about how to use this procedureon other types of e-mail clients, look at the user documentation for those products.Sending spam or bulk e-mail to special folders in OutlookThis procedure shows you the steps to create rules for bulk and suspect e-mail in Microsoft Outlook. Youcan have e-mail with a “spam” or “bulk” tag delivered directly to special folders in Outlook. When youcreate these folders, you keep possible spam e-mail out of your usual Outlook folders, but you can getaccess to the e-mail if it becomes necessary.If you use another e-mail client, check your user documentation for that product.304 <strong>WatchGuard</strong> System Manager