This article applies to:

• Trustwave MailMarshal (SEG)
• Trustwave ECM/MailMarshal Exchange

Question:

How do I stop email notifications about viruses? 

Procedure:

Viruses, malware, and spam typically use a random address for the sender, so the "sender address" is not necessarily the address of the actual source. You will not want to send a notification to the "sender address" in this case. 

Current versions of MailMarshal include separate rules for inbound (external sender) and outbound/internal messages.

• Where the sender is external, no email notification is sent.
• Where the sender is internal, the sender and administrator are notified.

If you are creating or modifying rules, Trustwave recommends that you maintain the above logic. You can also choose not to notify internal parties. For assistance in creating rules and actions, see the User Guide and Help for your product version.

This article was previously published as:

NETIQKB29650

Marshal KB345