Cisco Cisco Email Security Appliance X1050 Betriebsanweisung

Replaced by the current time and date, as would be 
found in the Received: line of an email message, 
using GMT.

Replaced by the Message ID, or “MID” used 
internally to identify the message. Not to be 
confused with the RFC822 “Message-Id” value 
(use $Header to retrieve that).

Replaced by the name of the sender group the 
sender matched on when injecting the message. If 
the sender group had no name, the string 
“>Unknown<” is inserted.

Replaced by the name of the HAT policy applied to 
the sender when injecting the message. If no 
predefined policy name was used, the string 
“>Unknown<” is inserted.

Replaced by the SenderBase Reputation score of 
the sender. If there is no reputation score, it is 
replaced with “None”.

Replaced with a comma-separated list of the 
message’s attachments’ filenames.

Replaced with a comma-separated list of the 
message's attachments' file types.

Replaced with a comma-separated list of the 
message’s attachment’s file sizes.

Replaced by the hostname of the system that sent 
the message to the Cisco IronPort appliance.

Replaced by the message headers.

Replaced by the Envelope Sender (Envelope From, 
<MAIL FROM>) of the message.

Replaced by the hostname of the Cisco IronPort 
appliance.