Microsoft KB Archive/929078

Knowledge Base

How to configure Forefront Security to send e-mail notifications to users about filtered e-mail messages or documents

Article ID: 929078

Article Last Modified on 12/8/2006

---

APPLIES TO

• Forefront Security for Exchange
• Forefront Security for SharePoint

---

INTRODUCTION

This article describes how to configure Microsoft Forefront Security for Exchange Server and Microsoft Forefront Security for SharePoint to send notifications to users about filtered e-mail messages or documents.

MORE INFORMATION

You can configure Forefront Security to filter or to delete the following types of e-mail messages or documents:

• A message or a document that is identified as infected by a virus.
• A message or a document that contains a keyword that is included in a keyword filter list.

However, users may not be aware that they either sent or were sent these kinds of messages or documents. To configure Forefront Security to send notifications to users about filtered e-mail messages or documents, follow these steps:

1. Start Forefront Server Security Administrator. To do this, follow these steps:
   1. Click Start, point to All Programs, point to Microsoft Forefront Server Security, point to Exchange Server, and then click Microsoft Forefront Security Administrator.
   2. In the What server do you want to connect to box, click the appropriate server. Or, click Browse, and then locate the server that you want.
   3. Click OK.
2. Enable notifications for the Antivirus scan job. To do this, follow these steps:
   1. In Shuttle Navigator, click Settings, and then click Antivirus.
   2. Under Name, click the scan job that you want. For example, in Forefront Security for Exchange, click Transport Scan Job. Or, in Forefront Security for SharePoint, click Sharepoint (Realtime Scan Job).
   3. Click to select the Send Notifications check box.
   4. Click Save.
3. Enable notifications for keyword filtering. To do this, follow these steps:
   1. In Shuttle Navigator, click Filtering, and then click Keyword.
   2. Under Name, click the scan job that you want. For example, click Transport Scan Job in Forefront Security for Exchange Server. Or, click SharePoint (Realtime Scan Job) in Forefront Security for SharePoint.
   3. Under Filter Lists, click the filter list entry that you want.
   4. In the lower-right pane, click to select the Send Notifications check box.
      
      Note In Forefront Security for Exchange, the Send Notifications check box is located on the General tab.
   5. Repeat steps 3b to 3d for any other filter lists that you want.
   6. Click Save.
4. In Shuttle Navigator, click Report, and then click Notification.
5. Under Name, click the entry that you want. For example, in Forefront Security for Exchange Server, click Virus Recipients (internal). Or, click Virus Author (Manual Scan, Email) in Forefront Security for SharePoint.
6. Click Enable.
7. In the notification message in the lower pane, type the respective keyword variable that you want to use in the To box. For example, in Forefront Security for Exchange, type %IRAddress%. Or, type %AuthorEmail% in Forefront Security for SharePoint.
   
   Alternatively, right-click the To box, point to Paste keyword, and then click the keyword variable that you want to use.
   
   Note For a complete list of keyword macros, see Appendix C in the Forefront Security User's Guide.
8. Click Save.
   
9. Exit Forefront Server Security Administrator.

Keywords: kbhowto kbinfo kbvirus kbfilters kbkeywordlist kbexpertiseadvanced kbantivirus KB929078

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.