When FPE deletes an attachment due to a file filter match, it uses deletion text to replace the content of the attachment. By default, the deletion text informs the recipient that a file was removed, along with the name of the file and the name of the filter that it matched. However, you can edit the deletion text for each scan job type in order to customize the message to meet your organization's needs.

To edit the deletion text for file filters

  1. In the Forefront Protection 2010 for Exchange Server Administrator Console, click Policy Management, and then under the Filters section, click Filter Options.

  2. In the Filters - Filter Options pane, click the Edit Deletion Text button for a specific scan job type (realtime, scheduled, on-demand, or transport).

  3. In the Edit Deletion Text dialog box, modify the deletion text for the scan job type you selected, and then click Apply and Close to apply your changes and return to the Filters - Filter Options pane.

  4. Modify the deletion text for additional scan job types as needed (you can cut and paste your changes from one scan job type to another).

    Note:
    FPE provides keywords that can be used in the deletion text field to obtain information from the message in which the filter was matched. To use them, in the Edit Deletion Text dialog box, right-click, select Insert Field, and then select the desired macro. For more information about keyword macros, see Keyword substitution macros.The default deletion text is: "Microsoft Forefront Protection for Exchange Server removed a file since it was found to match a filter. File name: '%File%' Filter name: '%Filter%'".

  5. Click Save.

Related Topics