Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Email Appliance Template Variables

I am using Template variable to notify sender what data policy ( CCL) an email trigged

http://esa.sophos.com/docs/esa/sea_docs/en/ESA/concepts/PolAboutActionsTempVars.html

I used this variables

%%CCL_MATCHES%%

With this policy the notifications comes like

Violation - National identification numbers with qualifying terms [Global] - email body

            '>>>SSN<<< 078-05-1120 NI AB 12 34 56 A'

            'SSN >>>078-05-1120<<< NI AB 12 34 56 A SSN 078-05-1'

But as you can see it also gives the text which is triggering the policy. Is there any way  to tweak the variables so it only notify which CCL it is triggering.

Example - Violation - National identification numbers with qualifying terms [Global]

I also wanted to incorporate Puremessage variables such as Message action: %MESSAGE_ACTION% but this variables doesn’’’’t work in Email appliance.

Any  thoughts on this ?

Thanks for your help.

:25015


This thread was automatically locked due to age.
  • Hi,

    The template variable for the data control is is governed by the logging options for that specific rule.  If you have checked all the options for Log CCL Violations, Include matched text & Include partial matches, then when the template is expanded it includes all that information.  If you just want the rule name, then only select the Log CCL Violation checkbox and that will give you what you are looking for.  As for the %%MESSAGE_ACTION%% template, that currently is not implemented on the Email Appliance. 

    You can also request a feature to the Email Appliance by going to the following site and submitting your feedback.

    http://feature.astaro.com/

    -Jason

    :25131
  • Jason

    Thank you for the suggestion. I made the configuration change as you suggested and  that give me exactly what I was looking for.  

    I will request some new feature as you suggest.

    Thank you.

    :25199