Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Create and Manage Antispam Profiles

Use the Create Antispam Profiles page to configure antispam profiles.

E-mail spam consists of unwanted e-mail messages usually sent by commercial, malicious, or fraudulent entities. When the device detects an e-mail message deemed to be spam, it either blocks the message or tags the message header or subject field with a preprogrammed string. Antispam filtering allows you to use a third-party server-based spam block list (SBL) and to optionally create your own local allowlists (benign) and blocklists (malicious) for filtering against e-mail messages.

Note:

Sophos updates and maintains the IP-based SBL. Antispam is a separately licensed subscription service.

After you create an antispam profile, you can assign it to content security profiles.

Create Antispam Profiles

  1. Select SRX > Security Subscriptions > Content Security > Antispam Profiles.

    The Antispam Profiles page appears.

  2. Click the plus icon (Blue plus symbol suggesting an action like adding or expanding content.) to create a new antispam profile.

    The Create Antispam Profiles page appears, displaying brief instructions about creating an antispam profile.

  3. Complete the configuration according to the following guidelines:
    Table 1: Antispam Profile Settings

    Setting

    Guideline

    General Information

    Name

    Enter a unique name for the antispam profile. The maximum length is 29 characters.

    Description

    Enter a description for the antispam profile. The maximum length is 255 characters.

    Sophos Blacklist

    Use this toggle button to enable server-based spam filtering. If the toggle button is disabled, which is the default, local spam filtering is used.

    Server-based antispam filtering requires Internet connectivity with the spam block list (SBL) server. Domain Name Service (DNS) is required to access the SBL server. The firewall performs SBL lookups through the DNS protocol.

    Note:

    Server-based spam filtering supports only IP-based spam block list blocklist lookup. Sophos updates and maintains the IP-based spam block list. Server-based antispam filtering is a separately licensed subscription service.

    Action

    Default Action

    Select the action to be taken when spam is detected:

    • Tag Email Subject Line

    • Tag SMTP Header

    • Block Email

    • None

    Custom Tag

    Enter a custom string for identifying a message as spam. The maximum length is 512 characters and the default is ***SPAM***.
  4. Click OK save the settings and create the profile.

    A message indicating the status of the create operation is displayed. You are returned to the Antispam Profiles page.

Manage Antispam Profiles

  • Edit—Select the profile, and then click the pencil icon (Blue pencil icon indicating edit functionality.). You cannot modify the default profiles already present in the system.

  • Clone—Select the profile, and then click More > Clone.

  • Delete—Select the profile, and then click the trash can icon (Blue trash can icon representing delete or remove function.). Before deleting an antispam profile, ensure that the profile is not used in a content security profile that is, in turn, used in a firewall policy rule. If you try to delete an antispam profile that is used in a firewall policy rule, an error message is displayed.