Cisco Cisco Email Security Appliance C160 Betriebsanweisung
C H A P T E R
12-1
Cisco AsyncOS 8.0.2 for Email User Guide
12
Anti-Virus
•
•
•
•
•
•
Anti-Virus Scanning Overview
The Cisco appliance includes integrated virus scanning engines from third party companies Sophos and
McAfee. You can obtain license keys for the Cisco appliance to scan messages for viruses using one or
both of these virus scanning engines, and then configure your appliance to scan for viruses using either
anti-virus scanning engine.
McAfee. You can obtain license keys for the Cisco appliance to scan messages for viruses using one or
both of these virus scanning engines, and then configure your appliance to scan for viruses using either
anti-virus scanning engine.
The McAfee and Sophos engines contain the program logic necessary to scan files at particular points,
process and pattern-match virus definitions with data they find in your files, decrypt and run virus code
in an emulated environment, apply heuristic techniques to recognize new viruses, and remove infectious
code from legitimate files.
process and pattern-match virus definitions with data they find in your files, decrypt and run virus code
in an emulated environment, apply heuristic techniques to recognize new viruses, and remove infectious
code from legitimate files.
You can configure the appliance to scan messages for viruses (based on the matching incoming or
outgoing mail policy), and, if a virus is found, to perform different actions on the message (including
“repairing” the message of viruses, modifying the subject header, adding an additional X-header,
sending the message to an alternate address or mailhost, archiving the message, or deleting the message).
outgoing mail policy), and, if a virus is found, to perform different actions on the message (including
“repairing” the message of viruses, modifying the subject header, adding an additional X-header,
sending the message to an alternate address or mailhost, archiving the message, or deleting the message).
If enabled, virus scanning is performed in the “work queue” on the appliance, immediately after
Anti-Spam scanning. (See
Anti-Spam scanning. (See
.)
By default, virus scanning is enabled for the default incoming and outgoing mail policies.
Evaluation Key
Your Cisco appliance ships with a 30-day evaluation key for each available anti-virus scanning engine.
You enable the evaluation key by accessing the license agreement in the System Setup Wizard or
Security Services > Sophos/McAfee Anti-Virus pages (in the GUI) or running the
You enable the evaluation key by accessing the license agreement in the System Setup Wizard or
Security Services > Sophos/McAfee Anti-Virus pages (in the GUI) or running the
antivirusconfig
or
systemsetup
commands (in the CLI). Once you have accepted the agreement, the Anti-Virus scanning
engine will be enabled, by default, for the default incoming and outgoing mail policies. For information