I realize this isnt exactly a SA question but i figured theres enough people on this list using sare rules to give some feedback. I work in a hospital where we obviously receive a lot of legit emails with drug names in them. However, we also receive a lot of spam with drug names in them as well. I know there are sare rules to catch these sort of things but the question i guess is can these rules distinguish between the two? The difference it seems is that in the legit emails they dont try to hide the drug names and in the spam they do. Before i install some of these rules, i wanted to hear if anyone has had any experience with this type of situation.

Thanks
Jim

Reply via email to