KB Article #101815

Virus Manager Policy- forward

Virus Manager Policy- forward
This article was previously published as ID#20504


Summary:
This TechNote explains how a Virus Manager Policy forwards a "Clean Copy."
In this example we are using a Sender Type Policy set in the INTERNAL Directory Tree:

- Virus Manager Sender (INTERNAL)
For all messages sent from this user ]Part 1
where one or more viruses were detected ]Part 1
forward a "Clean Copy" of the Message ]Part 1

if successful, quarantine the message with the tag: Virus Cleaned ]Part 2
and send the notification "Virus Cleaned" to the mail administrator ]Part 2

otherwise quarantine the message with the tag: Virus Not Cleaned ]Part 3
and send the notification "Virus Not Cleaned" to the mail administrator ]Part 3


PART 1: This section states that for all Internal Senders sending an e-mail with one or more viruses, clean the Virus or Viruses from the e-mail, then forward a non-infected copy of that message to the recipient(s).

PART 2: This portion of the Policy states what to do with the Infected message. In this case we are putting the Infected message into the Quarantine Queue and sending a notification to the Mail Administrator that we were able to disinfect the Virus or Viruses from the message.
(ALERT!!!: The original Quarantined message contains the actual Virus Infection)
(NOTE: This is the most commonly missed setting and often results in sending the infected message to the recipient(s).

PART 3: The last portion of the Policy states what to do with a message that we cannot disinfect. In this case, we do not forward any copies and just Quarantine the entire message, then send a notification to the Mail Administrator that Virus Manager could not remove the Virus or Viruses from the message.
(NOTE: This will happen if a new virus is found or the message and/or attachment(s) exhibit a Virus Type characteristic.)


Original Author: RSHAFER
Original Submitter: ABOCANEGRA
Keywords: VIRUS, VIRUS POLICY, CLEAN COPY MMS ID#20504