When Microsoft Forefront Protection 2010 for SharePoint (FPSP) deletes a file due to a file filter match, it uses deletion text to replace the content of the file. By default, the deletion text specifies that the file has been deleted due to a filter match. However, you can edit the deletion text for each scan job type in order to customize the message to meet your organization's needs.

To edit the deletion text for file filters

  1. In the Forefront Protection 2010 for SharePoint Administrator Console, click Policy Management, and then under the Filters section, click Filter Options.

  2. In the Filters - Filter Options pane, click the Edit Deletion Text button for a specific scan job type (realtime, scheduled, or on-demand).

  3. In the Edit Deletion Text dialog box, modify the deletion text for the scan job type you selected, and then click Apply and Close to apply your changes and return to the Filters - Filter Options pane.

  4. Modify the deletion text for additional scan job types as needed (you can cut and paste your changes from one scan job type to another).

    Note:
    FPSP provides keywords that can be used in the deletion text field to obtain information from the document in which the filter was matched. To use them, in the Edit Deletion Text dialog box, right click, select Insert Field, and then select the desired macro. For more information about keyword macros, see Keyword substitution macros.The default deletion text is: "Microsoft Forefront Protection for SharePoint removed a file since it was found to match a filter. File name: '%File%' Filter name: '%Filter%'".

  5. Click Save.

Related Topics