2 audit – AirLive ES-6000 User Manual
Page 153

152
7.2 Audit
Definition:
Rule Name
The name for an audit rule
Comments
The description of an audit rule
Combination
And:
Only when an e-mail meets all criteria is it to be audited
Or:
Only when an e-mail meets merely one criterion is it to be audited
Action
E-mails can be deleted, delayed, passed, inspected, or copied. If action is selected as “Inspect” or
“Copy To”, then an e-mail address should be specified in the blank field next to it to decide by
whom it is inspected or to where it is copied.
Archive Mail
E-mail that meets audit criteria can be archived.
Item
Audits e-mails by e-mail header, body, attachment name, or size.
E-mail header includes from, to and subject.
Condition
When
Item
set as From / To / Subject / Body / Attachment Name, the corresponding conditions
are
Contains
,
Does Not Contain
,
Is Equal To
,
Is Not Equal To
,
Starts With
,
Ends With
,
Exists
and
Does Not Exists
.
When
Item
set as Size, the corresponding conditions are
More Than
,
Is Equal To
,
Is Not Equal
To
and
Less Than
.
Pattern
Configure
the
Item
and Condition based on Pattern. For example, select “From” for Item,
“Contains” for Conditions and then type “Josh” as Pattern, then e-mails from “Josh” will be audited by
the device. (Figure 7-2)
Figure 7-2 Mail Audit