I am getting emails quarantined due to a supposed entry in our dictionary that is not in the dictionary. According to the AS log, the dictionary entry is:
((^|(?<=\d)(?:([ \t])\g{-1}*|([.,]))|[[({:;'' \t>.,])((?!000|666|9\d{2})\d{3}(-|\.|(?:([ \t])?\g{-1}*))(?!00)\d{2}\g{-2}(?!0000)\d{4})($|(?:([ \t])\g{-1}*|([.,]))(?=\d)|[])}:;'' \t<.,]))
I am not good at regex, I've spend an hour at least trying to decypher this. I most certainly do not have ANY regex entries in the dictionary. Is there some way I can determine what this regex entry stands for and why I am getting occasional quarantines due to this entry?
That's the US Social Security Smart Identifier.
Thanks. I do have that filter on.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.