Secure Computing SSL Scanner - Manual (Page 104)

Common
Body Filter List
The
Body Filter List
section looks like this:
Using this section, you can configure the Generic Body Filter blocking and
other actions for Web and e-mail content according to keywords, regardless of
the URL it originates from.
So, you could use the Generic Body Filter, e. g. to block Win32 executables.
When configuring the filter, rules are set up of the following format:
If the 2nd byte of a file has the value of n, and the 3rd byte does
not have the value of n, and within the bytes 100 to 200 a string of
n can be found, then ..
.
The Generic Body Filter also supports case-insensitive operands by using an
uppercase
I
in front of a quoted operand.
3–34