Activate and Configure spamBlocker

1. From Fireware Web UI, select Subscription Services > spamBlocker.
   The Activate spamBlocker Wizard starts.
2. Click Run Wizard.
   The Welcome page appears.
3. Click Next.
   If the Firebox configuration includes existing IMAP, POP3, or SMTP proxy policies that do not have spamBlocker enabled, the list of proxy actions for those policies appears.

4. To activate spamBlocker for a proxy action, select the check box adjacent to each proxy action.
5. Click Next.
   The Create new proxy policies page appears.

6. To create additional proxy policies, select the types of proxy policy to add.
7. If you select Incoming SMTP, specify the email server IP address.
8. Click Next.
9. Click Finish to complete the wizard.

1. In Policy Manager, select Subscription Services > spamBlocker > Activate.
   The Activate spamBlocker wizard starts.

2. Click Next.
   If the Firebox configuration includes existing IMAP, POP3, or SMTP proxy policies, and spamBlocker is not enabled in at least one policy, the list of those policies appears.

3. To enable spamBlocker for a proxy action, select the check box.
4. Click Next.
   If your configuration does not yet include an IMAP, SMTP, or POP3 proxy policy, the Create new proxy policies step appears.

5. To add a new proxy policy, select the type of proxy you want to add.
6. If you select an SMTP proxy, type email server IP address.
7. Click Next.

8. Select the check box at the bottom of the last page to open the spamBlocker configuration page after you finish the wizard.
9. Click Finish.

1. Select Subscription Services > spamBlocker.
   The spamBlocker configuration page appears, with a list of the SMTP and POP3 proxy actions on your Firebox. The Firewall Policies column shows whether the proxy action is used by a policy on your Firebox. The Status column shows whether spamBlocker is enabled for each proxy action.

2. Select a user-defined proxy action. Click Configure. Tip!You cannot edit a predefined proxy action. To enable spamBlocker for a proxy policy that uses a predefined proxy action, use the spamBlocker Activation Wizard as described in the previous section.

3. If spamBlocker is not already enabled, select the Enable spamBlocker check box.
4. From the drop-down lists adjacent to each spam category, select the action you want spamBlocker to take. WatchGuard recommends you use the Add a subject tag action for messages categorized as Suspect. If you select this action, you can change the tag that appears in the text box to the right of the drop-down list.
5. If spamBlocker is not already enabled, select the Enable spamBlocker check box.
6. From the drop-down lists adjacent to each spam category, select the action you want spamBlocker to take. WatchGuard recommends you use the Add a subject tag action for messages categorized as Suspect. If you select this action, you can change the tag that appears in the text box to the right of the drop-down list.

The Quarantine, Deny, and Drop actions are available only for the SMTP proxy. For more information about spamBlocker actions and tags, see spamBlocker Actions, Tags, and Categories.

7. If you want to send a log message each time spamBlocker takes an action, select the Send a log message check box for the action. If you do not want to record log messages for an action, clear this check box.
8. The When the spamBlocker server is unavailable drop-down list specifies how the Firebox handles incoming email when the Firebox cannot connect to the spamBlocker server. We recommend you use the default Allow action..

• If you set this option to Deny for the POP3, IMAP, or SMTP proxy, it causes a conflict with Microsoft Outlook. When Outlook starts a connection to the email server, spamBlocker tries to contact the spamBlocker server. If the spamBlocker server is not available, spamBlocker stops the email download. When this happens, a cycle starts. Outlook tries to download email and spamBlocker stops the download. This continues until the Firebox can connect to the spamBlocker server, or the request is dropped because the proxy times out, or you cancel the request.
• If you set this option to Deny with the SMTP proxy, the Firebox sends this 450 SMTP message to the sending email server: “Mailbox is temporarily unavailable.”

7. The Send a log message for each email classified as not spam check box specifies whether a message is added to the log file if an email message is scanned by spamBlocker but is not designated as Confirmed Spam, Bulk, or Suspect. Select this check box if you want to add a message to the log file in this situation.
8. (Optional) Add spamBlocker exception rules, as described in About spamBlocker Exceptions.
9. (Optional) Enable Virus Outbreak Detection, as described in Enable and Set Parameters for Virus Outbreak Detection (VOD) .
10. Click Save.

1. Select Subscription Services > spamBlocker > Configure.
   The spamBlocker dialog box appears with a list of the SMTP and POP3 proxies on your Firebox, and whether spamBlocker is enabled for each one.

2. Select a policy. Click Configure.
   The spamBlocker Configuration page for that policy appears.

3. Select the Enable spamBlocker check box.
4. Set the actions spamBlocker applies for each category of email in the drop-down lists adjacent to each spam category. WatchGuard recommends you use the Add subject tag action for messages categorized as Suspect. If you select this action, you can change the tag that appears in the text box to the right of the drop-down list.

The Quarantine, Deny, and Drop actions are available only for the SMTP proxy. For more information about spamBlocker actions and tags, see spamBlocker Actions, Tags, and Categories.

5. If you want to send a log message each time spamBlocker takes an action, select the Send a log message check box for the action. If you do not want to record log messages for an action, clear this check box.
6. The When the spamBlocker server is unavailable drop-down list specifies how the Firebox handles incoming email when the Firebox cannot connect to the spamBlocker server. We recommend you use the default Allow action.

• If you set this option to Deny for the POP3, IMAP, or SMTP proxy, it causes a conflict with Microsoft Outlook. When Outlook starts a connection to the email server, spamBlocker tries to contact the spamBlocker server. If the spamBlocker server is not available, spamBlocker stops the email download. When this happens, a cycle starts. Outlook tries to download email and spamBlocker stops the download. This continues until the Firebox can connect to the spamBlocker server, or the request is dropped because the proxy times out, or you cancel the request.
• If you set this option to Deny with the SMTP proxy, the Firebox sends this 450 SMTP message to the sending email server: “Mailbox is temporarily unavailable.”

7. The Send log message for each email classified as not spam check box specifies whether a message is added to the log file if an email message is scanned by spamBlocker but is not designated as Confirmed Spam, Bulk, or Suspect. Select this check box if you want to add a message to the log file in this situation.
8. (Optional) Add spamBlocker exception rules, as described in About spamBlocker Exceptions.
9. (Optional) Enable Virus Outbreak Detection, as described in Enable and Set Parameters for Virus Outbreak Detection (VOD) .
10. Click OK.