Open with table of contents

What To Do? Actions

What To Do? actions determine the outcome of content rules. They specify how the ARgon Server should handle content that has been detected.

You can add additional What Else To Do? actions to a content rule. For example, you might want to Generate an Inform to notify an administrator.

Tell me about...

• Generate an Inform

  The Generate an Inform action sends a notification email to specified recipients to inform them of the actions taken during ARgon Server message processing. For example, you can automatically inform an individual that the ARgon Server detected a threat, such as a virus, in an email.

  To configure a Generate an Inform action:

  1. Specify the conditions required for the inform to be sent:

     • If the "What to Look For?" conditions are met
     • If the conditions are met AND the disposal action is performed
     • If the conditions are met BUT the disposal action is not performed

  2. Select an inform from a list of available templates and customize the content.

     To create a new inform template, select (Create a new inform) from the drop-down menu and Save your changes. The inform is displayed as Using the template: 'Inform for [content rule name]'. Click the template name to modify the Inform.

  3. Specify the recipients who will receive the inform message:

     • Message Recipients: The recipients of the original message.

     • Message Originator: The sender of the original message.

       By default, the ARgon Server uses the address in the "From:" field of an email header to define who the Message Originator is. Select the Use Reply-to if available option if you would rather use the address in "Reply-to:" field of an email header as the Message Originator. If no address exists in the "Reply-to:" field, the ARgon Server uses the address in the "From:" field by default.

     • The sender's manager: The manager of the person who sent the original message.

     • Server Administrator: The system administrator.
     • This email address: An email address that you specify.

  4. Select Consolidate informs for the same message ID to consolidate multiple Inform notifications.

     In some hosted platforms (such as Gmail), messages sent to multiple recipients are split into multiple messages, each with a single recipient. If you have a policy that uses the Missing Manager feature then the ARgon Server sends an Inform to a manager or server administrator for each email that breached policy. Selecting Consolidate informs for the same message ID consolidate these notifications into a single Inform.

     Selecting this option can reduce the number of manager notifications you receive for the same message if you are using Missing Manager. If you use the %RCPTS% token in an inform then the inform will only contain the recipients of the split message and not the recipients of the original message. To see the full list of recipients for the original message, you must include the original message in the inform. For information on where to change these settings, see step 4 in Creating an Inform.

See also...

• Content Rules
• Disposal Actions
• About Informs
• Message Annotations
• Alert Settings
• Using Tokens