How to block emails containing Hyper Links in body.

Description

There are times when an email with hyperlink to malicious website makes to your network because it is not blocked by SonicWall and there are no signatures available yet with that link to block it..
In such cases you can create a policy as explained below to store such emails in junk box.

Resolution

Step 1. Log in to SonicWall Email Security and then go to Manage | Policy & Compliance | Filters | Inbound Add New Filter.

ImageStep 2. Select following conditions in filter.

Enable This filter 

If "Any" of these conditions are met:

Select: RFC 822 Byte Scan.

Matching: Contains

Search value: a href=

Action : Store in Junk box.

Filter Name - Give any filter name but make sure its just alphanumeric

NOTE: Do not include any symbols in the filter name as it may lead to filter corruption , space can be added

Apply This Filter to : Everyone

Save this filter and now it should block any email containing hyperlink in body.

CAUTION: Enabling this filter will block all emails containing hyperlinks in the body irrespective of legitimate link or malicious link.

 

Image NOTE: If the navigation or the screenshot looks different from the one mentioned above , you may be in an older firmware version and would require a firmware upgrade. Please refer the link below to upgrade the firmware to latest version.

  https://www.sonicwall.com/en-us/support/knowledge-base/170504270079039


 

Related Articles

  • Invalid SFP Connected warning on SonicWall firewall when using supported 10G SFP+ Module
    Read More
  • How to exclude the domain from DHA scanning?
    Read More
  • Email Security: How to download the Outlook Junk Tool?
    Read More
not finding your answers?