Response

Based on the message scan results, ESET Endpoint Antivirus can move scanned messages or add custom text to subject. You can configure these settings in Advanced setup > Protections > Email client protection > Mailbox protection > Response.

If there is a message containing detection, by default, ESET Endpoint Antivirus attempts to clean the message. If the message cannot be cleaned, you can choose an Action to take if cleaning not possible:

• No action—If enabled, the program will identify infected attachments but will leave emails without taking any action.
• Delete email—The program will notify the user about infiltration(s) and delete the message.
• Move email to the Deleted items folder—Infected emails will be moved automatically to the Deleted items folder.
• Move email to folder (default action)—Infected emails will be moved automatically to the specified folder.

Folder—Specify the custom folder where you want to move infected emails when detected.

After an email has been checked, a notification with the scan result can be appended to the message. You can elect to Append tag messages to received and read email or Append tag messages to sent email. Be aware that on rare occasions tag messages may be omitted in problematic HTML messages or if messages are forged by malware. The tag messages can be added to received and read email, sent email or both. The following options are available:

• Never—No tag messages will be added.
• When a detection occurs—Only messages containing malicious software will be marked as checked (default).
• To all email when scanned—The program will append messages to all scanned email.

Update subject of received and read email / Update subject of sent email—Enable this option to add custom text specified below to the message.

Text to add to subject of detected email—Edit this template if you want to modify the subject prefix format of an infected email. This function will replace the message subject "Hello" to the following format: "[detection %DETECTIONNAME%] Hello". The variable %DETECTIONNAME% represents the detection.