Cisco Cisco Content Security Management Appliance M1070 Betriebsanweisung

Message ID Header and Cisco IronPort MID: Enter a text string for the message ID header, the 
Cisco IronPort message ID (MID), or both.

Query Settings: From the drop-down menu, select how long you want the query to run before it 
times out. Options are “1 minute,” “2 minutes,” “5 minutes,” “10 minutes,” and “No time limit.” 
Also, select the maximum number of results you want the query to return (up to 1000). 

Attachment name: Select Begins With, Is, or Contains, and enter an ASCII or Unicode text string 
for one Attachment Name to find. Leading and trailing spaces are not stripped from the text you 
enter. 

For more information about identifying files based on SHA-256 hash, see 

You do not need to complete every field. Except for the Message Event options, the query is an “AND” 
search. The query returns messages that match the “AND” conditions specified in the search fields. For 
example, if you specify text strings for the envelope recipient and the subject line parameters, the query 
returns only messages that match both the specified envelope recipient and the subject line.

Click Search.

The query results appear at the bottom of the page. Each row corresponds to an email message. 

Your search criteria are highlighted in each row. 

If the number of returned rows is greater than the value specified in the “Items per page” field, the results 
appear on multiple pages. To navigate through the pages, click the page numbers at the top or bottom of 
the list.

If necessary, refine the search by entering new search criteria, and run the query again. Alternatively, 
you can refine the search by narrowing the result set, as described in the following section.