Description
This article describes how to use a DLP profile to detect emails with an empty body.
Scope
FortiMail - Version 6.2.5 and above, 6.4.1 and above, 7.X versions and above.
Solution
1) Go to Data Loss Prevention -> Rule & Profile -> Rule.
2) Create a new message scan rule.
3) Create a new condition as below.
4) Go to Data Loss Prevention -> Rule & Profile -> Profile.
5) Create a new DLP profile.
6) Create a new DLP content scan setting as below and select the scan rule created earlier.
7) It is possible to select the required action profile for the scan rule.
8) Apply the new DLP profile to the policy accordingly.
Result :
The mail with an empty body is detected by the DLP profile and the 'Quarantine' action is applied.
