Cisco Cisco Email Security Appliance X1050 Betriebsanweisung

Replaced by the message From: header (not the 
Envelope Sender).

Replaced by the subject of the original message.

Replaced by the current date, using the format 
MM/DD/YYYY.

Replaced by the current time, in the local time 
zone.

Replaced by the current time and date, as would be 
found in the Received: line of an email message, 
using GMT.

Replaced by the Message ID, or “MID” used 
internally to identify the message. Not to be 
confused with the RFC822 “Message-Id” value 
(use $Header to retrieve that).

Replaced by the name of the sender group the 
sender matched on when injecting the message. If 
the sender group had no name, the string 
“>Unknown<” is inserted.

Replaced by the SenderBase Reputation score of 
the sender. If there is no reputation score, it is 
replaced with “None”.

Replaced with a comma-separated list of the 
message’s attachments’ filenames.

Replaced with a comma-separated list of the 
message's attachments' file types.

Replaced with a comma-separated list of the 
message’s attachment’s file sizes.

Replaced by the hostname of the system that sent 
the message to the Cisco IronPort appliance.

Replaced by the message headers.

Replaced by the Envelope Sender (Envelope From, 
<MAIL FROM>) of the message.