Question

A financial services company runs a Cisco Secure Email Gateway (ESA). Compliance requires that any outbound message containing customer Social Security Numbers must be prevented from leaving the organization and held for a compliance officer to review before any release decision is made. The security engineer must configure an outgoing mail policy that inspects message content and applies the appropriate action. Which ESA configuration meets this requirement?

Accepted Answer

Enable an outgoing DLP policy using the built-in RSA/PII dictionary for SSNs with a 'Quarantine' action pointing to a policy quarantine

Answer

Create an incoming content filter matching SSN patterns and set the action to 'Drop'

Answer

Add the SSN pattern to the sender group blocklist so matching messages are rejected at the SMTP conversation

Answer

Enable outbound anti-spam scanning and set the positively-identified spam action to 'Deliver with prepended subject'