Operation: | Add SMTP Policy / Edit SMTP Policy
Description: | To Add/Edit SMTP Policy which defines action to be taken on traffic destined for specific mail domain.

Sample Configuration
    	<SMTPPolicy>
    		<Name>Postman.local</Name>
    		<DomainList>
    		<DomainName>Postman.local</DomainName>
    		</DomainList>
    		<RouteBy>Static Host</RouteBy>
    		<SpamProtection>
    		<SpamProtectionStatus>ON</SpamProtectionStatus>
    		<Checkforinboundspam>Enable</Checkforinboundspam>
    		<Checkforvirusoutbreak>Disable</Checkforvirusoutbreak>
    		<Checkforoutboundspam>Enable</Checkforoutboundspam>
    		<CheckforRBL>Enable</CheckforRBL>
    		<SpamAction>Drop</SpamAction>
    		<ProbableSpamAction>Warn</ProbableSpamAction>
    		<RBLList>
    			<RBLName>Premium RBL Services</RBLName>
    			<RBLName>Standard RBL Services</RBLName>
    		</RBLList>
    		<SpamMarker>[SPAM]</SpamMarker>
    		</SpamProtection>
    		<MalwareProtection>
    		<MalwareProtectionStatus>ON</MalwareProtectionStatus>
    		<MalwareScanning>Dual Anti-Virus</MalwareScanning>
    		<AntivirusAction>Drop</AntivirusAction>
    		<NotifySender>Disable</NotifySender>
    		<QuarantineUnscannableandEncryptedContent>Enable</QuarantineUnscannableandEncryptedContent>
    		<SophosSandstorm>Enable</SophosSandstorm>
    		<ScannedFileSize>10</ScannedFileSize>
    		</MalwareProtection>
    		<FiletypeFilter>
    		<FiletypeFilterStatus>ON</FiletypeFilterStatus>
    		<BlockFileTypes>
    			<FileType>Video Files</FileType>
    			<FileType>Audio Files</FileType>
    		</BlockFileTypes>
    		<MIMEWhiteList>
    			<WhiteList>video/msvideo</WhiteList>
    			<WhiteList>video/x-msvideo</WhiteList>
    			<WhiteList>video/quicktime</WhiteList>
    			<WhiteList>application/smil</WhiteList>
    		</MIMEWhiteList>
    		<DropMessageGreaterThan>0</DropMessageGreaterThan>
    		</FiletypeFilter>
    		<DataProtection>
    		<DataProtectionStatus>ON</DataProtectionStatus>
    		<ActionOnRuleMatch>Accept with SPX</ActionOnRuleMatch>
    		<NotifyOnMatch>Enable</NotifyOnMatch>
    		<DataProtectionPolicy>Postal addresses</DataProtectionPolicy>
    		<DataProtectionSPXTemplate>Default Template</DataProtectionSPXTemplate>
    		</DataProtection>
    		<Action>Accept</Action>
    		<SPXEncryption>None</SPXEncryption>
    		<RouteList>
    			<HostName>
    				<routingid>10.198</routingid>
    				<routingorder>0</routingorder>
    			</HostName>
    		</RouteList>
    	</SMTPPolicy>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
Name | Yes |  | Description: Name to identify the SMTP Policy. Name confines to: Type is 'SCALAR'. Datatype is 'STRING'. Maximum characters allowed are 100.
FileType | Yes |  | Description: Attachment file types that are removed from Email during Malware Scanning. FileType confines to: Type is 'ARRAY'. Datatype is 'STRING'. Multiple values are allowed.
RouteBy | No | MX | Description: The server type of the target route. RouteBy confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_STATICHOST_ROUTE}', '$EMAILPROTECTION{SMTP_DNSHOST_ROUTE}', '$EMAILPROTECTION{SMTP_MX_ROUTE}' are allowed.
DataProtectionSPXTemplate | No |  | Description: SPX Template to be applied to the Email if Data Protection section is enabled and Accept with SPX action is selected. DataProtectionSPXTemplate confines to: Type is 'SCALAR'. Datatype is 'STRING'.
Checkforinboundspam | No |  | Description: Emails received by the users are scanned for spam by the Device. Checkforinboundspam confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_INBOUND_SPAM_DISABLE}', '$EMAILPROTECTION{SMTP_INBOUND_SPAM_ENABLE}' are allowed.
Checkforvirusoutbreak | No |  | Description: Emails received by the users are scanned for viruses by the Device. Checkforvirusoutbreak confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_VIRUS_OUTBREAK_DISABLE}', '$EMAILPROTECTION{SMTP_VIRUS_OUTBREAK_ENABLE}' are allowed.
Checkforoutboundspam | No |  | Description: Emails sent by the local users are scanned for spam by the Device before being delivered. Checkforoutboundspam confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_OUTBOUND_SPAM_DISABLE}', '$EMAILPROTECTION{SMTP_OUTBOUND_SPAM_ENABLE}' are allowed.
CheckforRBL | No |  | Description: Emails are scanned to verify the reputation of the sender IP Address. CheckforRBL confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_CHECK_RBL_DISABLE}', '$EMAILPROTECTION{SMTP_CHECK_RBL_ENABLE}' are allowed.
RBLName | No |  | Description: Selected RBL against which Device verifies IP Reputation of Emails. RBLName confines to: Type is 'ARRAY'. Datatype is 'STRING'. Multiple values are allowed.
SpamAction | Yes |  | Description: Action to be taken if Email is detected as Spam. SpamAction confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_SPAM_ACTION_QUARANTINE}', '$EMAILPROTECTION{SMTP_SPAM_ACTION_WARN}', '$EMAILPROTECTION{SMTP_SPAM_ACTION_OFF}', '$EMAILPROTECTION{SMTP_SPAM_ACTION_DROP}' are allowed.
ProbableSpamAction | Yes |  | Description: Action to be taken if Email is detected as suspicious but not confirmed as Spam. ProbableSpamAction confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_PROBABLE_SPAM_ACTION_QUARANTINE}', '$EMAILPROTECTION{SMTP_PROBABLE_SPAM_ACTION_WARN}', '$EMAILPROTECTION{SMTP_PROBABLE_SPAM_ACTION_OFF}', '$EMAILPROTECTION{SMTP_PROBABLE_SPAM_ACTION_DROP}' are allowed.
SpamMarker | No |  | Description: If Spam Action or Probable Spam Action is specified as Warn, this is the tagged message in the Subject of an Email if it is found to be a Spam or Probable Spam. SpamMarker confines to: Type is 'SCALAR'. Datatype is 'STRING'. Maximum characters allowed are 256.
MalwareScanning | Yes |  | Description: The type of Anti-virus scanning to be applied: Single or Dual. MalwareScanning confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_AV_SCANNING_DISABLE}', '$EMAILPROTECTION{SMTP_AV_SCANNING_SINGLE_AV}', '$EMAILPROTECTION{SMTP_AV_SCANNING_DUAL_AV}' are allowed.
AntivirusAction | No |  | Description: Action to be taken if a malware is detected in an Email. AntivirusAction confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_AV_ACTION_QUARANTINE}', '$EMAILPROTECTION{SMTP_AV_ACTION_DROP}', '$EMAILPROTECTION{SMTP_AV_ACTION_OFF}', '$EMAILPROTECTION{SMTP_AV_ACTION_PREFIXSUBJECT}' are allowed.
ActionOnRuleMatch | No |  | Description: Action to be taken on an Email if it is found to contain sensitive information as detected in any Data Protection Policy (DPP). ActionOnRuleMatch confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_DPP_ACTION_ACCEPT}', '$EMAILPROTECTION{SMTP_DPP_ACTION_ACCEPTWITHSPX}', '$EMAILPROTECTION{SMTP_DPP_ACTION_OFF}' are allowed.
MalwareProtectionStatus | Yes | OFF | Description: On Anti-virus section to configure malware scanning of Email traffic. MalwareProtectionStatus confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_ANTIVIRUS_SETTING_DISABLE}', '$EMAILPROTECTION{SMTP_ANTIVIRUS_SETTING_ENABLE}' are allowed.
QuarantineUnscannableandEncryptedContent | No | Enable | Description: Enable to quarantine emails whose content cannot be scanned. QuarantineUnscannableandEncryptedContent confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{UNSCANNABLE_QUARANTINE_DISABLE}', '$EMAILPROTECTION{UNSCANNABLE_QUARANTINE_ENABLE}' are allowed.
DetectZero-dayThreatswithSandstorm | No | Disable | Description: Enable to send emails for Sandstorm analysis. DetectZero-dayThreatswithSandstorm confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SANDSTORM_ENABLE}', '$EMAILPROTECTION{SANDSTORM_DISABLE}' are allowed.
ScannedFileSize | No | 10 | Description: The size of files that can be analyzed by Sandstorm. ScannedFileSize confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Range 1 to 10 is allowed.
route_details | No |  | Description: Specify 'route_details' confines to: Type is 'ARRAY'. Datatype is 'OBJECT'. route_details Multiple values are allowed.
DomainName | Yes |  | Description: Domain(s) to which the profile links. DomainName confines to: Type is 'ARRAY'. Datatype is 'STRING'. Multiple values are allowed.
routingid | No |  | Description: IP Address of Static Host. routingid confines to: Type is 'SCALAR'. Datatype is 'STRING'.
NotifySender | No |  | Description: If enabled, the original message is withheld by the Device and a notification is sent to the sender informing that the Email was infected. NotifySender confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_AV_NOTIFY_SENDER_DISABLE}', '$EMAILPROTECTION{SMTP_AV_NOTIFY_SENDER_ENABLE}' are allowed.
DropMessageGreaterThan | Yes |  | Description: Specified action will be taken if the Email size matches the specified size. DropMessageGreaterThan confines to: Type is 'SCALAR'. Datatype is 'INTEGER'.
routingorder | No |  | Description: Order in which Static Hosts are listed. routingorder confines to: Type is 'SCALAR'. Datatype is 'INTEGER'.
FiletypeFilterStatus | Yes | OFF | Description: On Filetype Protection section to configure filtering of specific attachments in Email Traffic. FiletypeFilterStatus confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_FILETYPE_FILTER_SETTING_DISABLE}', '$EMAILPROTECTION{SMTP_FILETYPE_FILTER_SETTING_ENABLE}' are allowed.
DataProtectionStatus | Yes | OFF | Description: On Data Protection Policy section to configure confidential data protection in Email Traffic. DataProtectionStatus confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_DPP_SETTING_DISABLE}', '$EMAILPROTECTION{SMTP_DPP_SETTING_ENABLE}' are allowed.
DataProtectionPolicy | No |  | Description: The policy to be applied for DP scanning. DataProtectionPolicy confines to: Type is 'SCALAR'. Datatype is 'STRING'.
SpamProtectionStatus | Yes | OFF | Description: On Anti-spam section to configure Spam scanning of Email traffic. SpamProtectionStatus confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_ANTISPAM_SETTING_DISABLE}', '$EMAILPROTECTION{SMTP_ANTISPAM_SETTING_ENABLE}' are allowed.
WhiteList | No |  | Description: MIME Header(s) of the selected File Type(s). Only selected headers are to be allowed while the rest in the selected File Type are to be blocked during Malware scanning of Email attachments. WhiteList confines to: Type is 'ARRAY'. Datatype is 'STRING'. Multiple values are allowed.
Action | No | Accept | Description: Action to be taken on SMTP traffic on which profile is applied: Accept or Reject. Action confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_ACCEPT}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_ADDHEADER}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_DELETEHEADER}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_SUBJECTMARKER}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_CHANGESUBJECT}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_ADDRECIPENT}', '$EMAILPROTECTION{SMTP_GLOBAL_ACTION_REJECT}' are allowed.
SPXEncryption | No |  | Description: SPX Template to be applied to the Email. SPXEncryption confines to: Type is 'SCALAR'. Datatype is 'STRING'.
NotifyOnMatch | No |  | Description: Enable to notify the sender of an Email if it is found to contain sensitive information as per configured DP policy. NotifyOnMatch confines to: Type is 'SCALAR'. Datatype is 'INTEGER'. Only '$EMAILPROTECTION{SMTP_DPP_NOTIFY_SENDER_DISABLE}', '$EMAILPROTECTION{SMTP_DPP_NOTIFY_SENDER_ENABLE}' are allowed.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Edit SMTP Policy | 200 |
Edit SMTP Policy | 500 |
Edit SMTP Policy | 542 |
Edit SMTP Policy | 541 |
Edit SMTP Policy | 543 |
Edit SMTP Policy | 545 |
Add SMTP Policy | 200 |
Add SMTP Policy | 500 |
Add SMTP Policy | 542 |
Add SMTP Policy | 541 |
Add SMTP Policy | 502 |
Add SMTP Policy | 543 |
Add SMTP Policy | 545 |

) Copyright 2017 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.