Skip to main content

Custom Rule Data

To access Custom Rule Data actions go to Products > Custom Rule Data.

Use Custom Rule Data to create custom variable lists. Their main purpose is to enhance Message Rules and Connection Rules by providing customized data to compare emails against.

75300_6.png

Note

Clicking on one of items opens the data set for editing.

  1. Rule Data - Displays a list of previously created rule data sets. Rule Data provides a data set against which to compare emails.

  2. Rule RegEx - Contains a list of previously created Rule RegEx sets. Rule RegEx (regular expression) is a pattern that describes a certain syntax of text. Regular expressions allow you to compare against a specific string of words instead of comparing to every possible permutation of multiple words.

  3. Add new - adds a new data set.

  4. Delete - deletes the selected data set.

Add Rule Data or Rule RegEx

  1. Click the emailsecnewbutton.png Add New button at the lower right side of the screen.

  2. Select the type of data set you want to create. You can select between Rule Data and Rule RegEx.

    Rule Type

    Description

    Examples

    Rule RegEx

    A RegEx (short for "regular expression) is a pattern that describes a certain syntax of text. Regular expressions allow you to very accurately define patterns against which to match (rather than trying to list every possible permutation).

    The RegEx parser does not require you to use the traditional forward slashes around a regular expression. These will automatically be added to your pattern when the RegEx is processed.

    Valid regular expressions:

    ^.+\.(?:(?:[dD][oO][cC][xX]?))$
\bpass\b
\b4\d{3}([\ \-]?)\d{4}\1\d{4}\1\d{4}\b(?!([^<]+)?>)
\[secure\]

    Note

    Unlike Rule Data, a Rule RegEx should be kept to a single line. If your regular expression needs to detect the new line character, you can use \n.

    Search for multiple words:

    gray|grey

    Search for the word secure, ignoring capitalization:

    \b(?i)secure\b

    Search for multiple words, ignoring capitalization:

    (?i)\b(?:direct deposit|bank account|payroll|paycheck|bank details|password expires)\b

    Search for a 16 digit code starting with a 1:

    1\d{10}

    Search for a 5 letter word starting in pr and ending in e:

    pr..e

    Search for words of any length, starting in b and ending in bble:

    b[aeiou]bble

    Search for gr*y, where * can be either a or e: 

    gr(a|e)y

    You can check the format of your entries and run them against specific examples using this tool.

    Rule Data

    A list of text values against which to match. Separate each new value with a new line.

    If you add multiple words on a line, Email Security will search for the words together, in the order you entered them. If the words are found, but separate, or in a different order, they will not be identified as a match.

    Create a list of words you want to look for in emails that might indicate a phishing attempt:

    Label
Invoice
Post
Urgent
Verification required
Need urgent help
Suspicious activity
Important
Action required

  3. Type in a name for the data set and click Update.

  4. Add in the information under the Value text box.

  5. Click the emailsecsave.png Save button.

Delete Rule Data

  1. Select the data set you want to delete.

  2. Click the emailsecuritydeletebutton.png Delete button.

Edit Rule Data

  1. Select the rule data set you wish to edit.

  2. Change the information in the Value or Name text boxes.

  3. Click the emailsecsave.png Save button.

In this section: