An error occurred while saving the commentJason Kupke commented
We're able to block keywords in our end-of-life Sophos UTM devices. It seems crazy that the "Next Gen" XG doesn't offer the same functionality.
This works great in the UTM, but has been an issue with our XG migration.
Specifically, we use it on the mail proxy (MTA in XG) to provide an additional layer of filtering. Several SPAM & ransomware threat emails are consistently able to bypass our SG & XG mail proxies. These come from different senders, IPs, countries, etc. almost every time. Some of the messages are very similar, and nearly all have certain test (bitcoin, Japanese/Russian characters, etc.).