Configuring decompression filter actions

Screenshot 72 - Decompression filter actions

To configure the actions to be performed whenever a particular filter blocks emails containing archives:

1. Click the GFI MailSecurity > Decompression node and from the right window select the required filter.

2. Click the Actions tab and select any of the following actions:

•	Notify local user – Select this option if you want to notify the email local users when the email contains an archive file that infringes a decompression engine rule.

NOTE: If a threat is detected in an outbound email, the recipients will receive the original email with the malicious parts removed. A security notice is attached to the email to inform the recipients what email parts were removed and for what reason. This behavior is always enabled and is not affected by this setting.

•	Notify administrator – Select this option to send email notifications to the administrator whenever an email containing an archive is quarantined.

•	Log occurrence to this file – Select this option to log the event whenever the selected decompression filter blocks an email. In the box below, specify either a file name only or the full path to the log file.

3. Click Apply.