Mail routing route based on sender address or words in object

Question

Hi, 
 I need to always block mail that have specific sender and/or specific words in the the object/body. There is a way to make this with UTM 9? With Sophos XG (i can upgrade my unit from UTM 9.506 to XG if necessary). 
 It can be a "data protection" for incoming (and not outgoing) mail. 
 It's possibile? 
 
 Thanks

BAlfson · Accepted Answer

Ciao and welcome to the UTM Community! 
 If an address (sender@domain.com) or a domain (*@domain.com) is blacklisted on the 'Antispam' tab, the email will be blocked for all recipients. If an individual recipient whitelists or blacklists a sender or domain, that setting will override the global setting on the 'Antispam' tab for the individual recipient. 
 If you add Free Money to the list of expressions in the 'Expression Filter', emails with that in the subject or body will be quarantined unless there's an Exception for select recipients or senders exempting them from the 'Expression Filter'. 
 Does that answer your question? 
 Cheers - Bob