Open with table of contents

The Starter Content Security Policy

Clearswift ARgon for Email includes an initial content security policy as a starting point for creating your own corporate policy. The starter policy contains basic policy routes for incoming and outgoing mail, with suggested content rules and policy references already applied.

Tell me about...

• The protection that the starter policy provides

  The starter policy provides routes and rules for outgoing and incoming mail. Remediate routes are designed to perform an action on detected content. Monitor routes enable you to detect and monitor content as it is delivered into or out of your organization. The starter policy also includes a route that catches messages that do not match the other policy routes.

  The starter policy is designed to provide a template which can be adapted to suit the requirements of your organization. We recommend customizing the policy as soon as possible to enhance system performance and avoid the potential for false positive results.

  Outbound messages

  Rules for outgoing email are contained within the My Company to Anyone policy route. The route has a default disposal action of Deliver, so the message is delivered unless at least one of the applied content rules triggers and specifies a different disposal action.

  Rules for outgoing email are contained within the My Company to Anyone policy routes. These routes have a default disposal action of Deliver, so the message is delivered unless at least one of the applied content rules triggers and specifies a different disposal action.

  Show me what happens to messages on the My Company to Anyone (Remediate) route:

  This starter policy route is configured to:

  Sanitize messages containing active content, deliver to the recipient and hold a copy in the Adaptive Redaction Hold message area. Sanitized messages are annotated before delivery.

  Hold unsuccessfully sanitized messages in the Active Code area and inform the sender that the message has not been delivered.

  Redact messages containing either 'PCI','PII' or 'Confidential' terms, deliver to the recipient and hold a copy in the Adaptive Redaction Hold area. Redacted messages are annotated before delivery.

  Hold unsuccessfully redacted messages in the appropriate message area (PCI, PII or Confidential Material). Inform the sender that the message has not been delivered.

  Sanitize message attachments containing document properties*, deliver to the recipient and hold a copy in the Adaptive Redaction Hold message area. Sanitized messages are annotated before delivery.

  Hold unsuccessfully sanitized message attachments in the Confidential Material message area. Inform the sender that the message has not been delivered.

  If message modification fails, hold the message in the Message Processing Failure message area.

  If message processing fails, hold the message in the Message Processing Failure message area.

  * The starter policy is configured to sanitize all available document properties and hold a copy of the attachment in the Adaptive Redaction Hold area.

  Show me what happens to messages on the My Company to Anyone (Monitor) route:

  This starter policy route is configured to:

  Deliver messages containing active code and hold a copy in the Active Code message area.

  Deliver messages containing detected either 'PCI', 'PII' or 'Confidential' terms and hold a copy in the appropriate message area (PCI, PII of Confidential Material).

  If message modification fails, hold the message in the Message Processing Failure message area.

  If message processing fails, hold the message in the Message Processing Failure message area.

   

  Inbound messages

  Rules for incoming email are contained within the Anyone to My Company policy routes. These routes have a default disposal action of Deliver, so the message is delivered unless at least one of the applied content rules triggers and specifies a different disposal action.

  Show me what happens to messages on the Anyone to My Company (Remediate) route:

  This starter policy route is configured to:

  Sanitize messages containing active content, deliver to the recipient and hold a copy in the Adaptive Redaction Hold message area.

  Hold unsuccessfully sanitized messages in the Active Code area and inform the recipients that the message has not been delivered.

  Redact messages containing either 'PCI','PII' or 'Confidential' terms, deliver to the recipient and hold a copy in the Adaptive Redaction Hold area. Redacted messages are annotated before delivery.

  Hold unsuccessfully redacted messages in the appropriate message area (PCI, PII or Confidential Material). Inform the sender that the message has not been delivered.

  Sanitize message attachments containing document properties*, deliver to the recipient and hold a copy in the Adaptive Redaction Hold message area. Sanitized messages are annotated before delivery.

  Hold unsuccessfully sanitized message attachments in the Confidential Material message area. Inform the sender that the message has not been delivered.

  If message modification fails, hold the message in the Message Processing Failure message area.

  If message processing fails, hold the message in the Message Processing Failure message area.

  * The starter policy is configured to sanitize all available document properties and hold a copy of the attachment in the Adaptive Redaction Hold area. We strongly recommend that you customize the Sanitize Document Content rule at the earliest possible opportunity to avoid overloading the message area and affecting system performance.

  Show me what happens to messages on the Anyone to My Company (Monitor) route:

  This starter policy route is configured to:

  Deliver messages containing active content and hold a copy in the Active Code area

  If message modification fails, hold the message in the Message Processing Failure message area.

  If message processing fails, hold the message in the Message Processing Failure message area.

   

  Rules for messages that are not matched on the other policy routes are contained within the For all email that does not match another route policy route. This policy route is supplied without any applied content rules, so its default disposal action of holding messages in the Misrouted Messages message area is always applied.

How do I...

• Adapt the starter policy to fit my organization's requirement?

  For guidance on what aspects of the policy to adapt, and the steps you need to take, see the Adapting the Starter Policy topic.

• Find out more about what each content rule is doing?

  The starter policy contains preset content rules which form the default policy, following installation of the ARgon Server. We recommend customizing your security policy at the earliest opportunity. Click Policy > Mail Policy Routes. Select a route, click Edit and view the Content Rules. You can select and edit any of these content rules. The Overview section contains more detailed information about the operation of each content rule.

• View the default lexical expression lists?

  To find out which terms are contained in the Confidential Material or PCI lexical expression lists, click Policy > Policy References > Lexical Expressions. The Lexical Expressions tab displays a list of the currently available lexical expression lists. See the Working with Lexical Expressions topic for more information.

See also...

• Policy Routes
• Content Rules

© 1995–2018 Clearswift Ltd.