Source IP address: Corresponds to the IP address of a 1.2.3.4 connection or a network by its CIDR notation ( 1.2.3.0/24).
Recipient: The aim here is to detect a signature on the whole recipient addresses in messages. The records can be a regular expression or a simple search with the "*" jocker character.
Sender Address: Detects a signature in the message sender's address. The records can be a regular expression or a simple search with the "*" jocker character.
Active Directory group recipients This acls object lets you add Active Directory groups. If all recipients are part of a listed Active Directory group, it will return the value TRUE.
Attachments: This object will search the file names of attachments and also attachments in rar,tar,zip compressed format.
URLs in messages This object searches Web links in the body text or HTML of messages.
Artica Deny reputations Artica deny reputation is a service offered by Artica Tech to check email senders IP addresses reputation.