Using Tokens in Content Rules and Policy References

The following tables provide a full list of tokens that can be used in certain What To Do? actions and Policy References.

Token Description/Value Where it can be used...
%ADMIN%

The administrator account email address used by the Policy Engine.

Informs
%ALARM_DESCRIPTION%

The description of the raised alarm.

Email Alarm Messages
%ALARM_TEXT%

The text of the raised alarm.

Email Alarm Messages
%ALARM_TYPE%

The type of the raised alarm.

Email Alarm Messages
%DETECTED%

Items detected by the What To Look For? clauses in invoked content rules.

Informs
%DIAGNOSTICS%

A complete report of the data analysis.

Block Pages, Informs
%FORMATSUBTYPE%

The low level type of data recognized.

Block Pages, Informs
%FORMATTYPE%

The type of data recognized.

Block Pages, Informs
%HOSTNAME%

The hostname of the machine on which an alarm has been raised.

Email Alarm Message
%IPADDRESS%

The IP address of the machine on which an alarm has been raised.

Email Alarm Message
%PROXY%

The hostname of the server that initiated the warning page.

Block Page, Quota Warning Page
%ROUTE%

The name of the route that determined the policy.

Block Pages, Informs
%ROUTEQUOTA%

The total quota time for the current route.

Block Pages, Quota Warning Pages
%RULES%

A comma separated list of matched rules.

Block Pages, Informs
%SERVERADDRESS%

The hostname of the Clearswift Gateway .

Informs
%URL%

The full URL of the request.

Block Pages, Informs
%URL_CATEGORY%

The  URL category name for the current request.

Block Pages, Informs
%USER%

The user name, or, if no user name is available, the IP address of the client machine.

Block Pages, Informs
%USERADDRESS%

The IP address of the client machine.

Block Pages, Informs
%USER_QUOTA_REMAINING%

The remaining quota time for the user for the current route.

Block Pages, Quota Warning Pages
%USER_QUOTA_USED%

The quota time used by the user for the current route.

Block Pages, Quota Warning Pages

Tell me about...