Threat emulation - Email content

[Geomix7]

Is there any possibility for TE to search for characters/words/content of the email subject and body?
If yes, how we can implement the requested configuration in TE R80.20.?

[Tal_Paz-Fridman]

Hi

You can use DLP Blade or Content Awareness Blade

https://www.checkpoint.com/products/data-loss-prevention/

HTH

Tal

[G_W_Albrecht]

The question reminds me of ISP Email systems from over 15 years ago - SPAM fighting would involve typing many pages full of text strings 😁 !

As CP MTA uses postfix, you could also do this in postfix using Postfix Configuration Parameter:

body_checks(default: empty)

Optional lookup tables for content inspection as specified in the body_checks(5)manual page.

Note: with Postfix versions before 2.0, these rules inspect all content after the primary message headers.