Cisco Cisco Email Security Appliance C170 Betriebsanweisung
9-313
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Chapter 9 Anti-Virus
Users will always be notified if their messages were modified in any way
because they were infected with a bad attachment. You can configure a
secondary notification action, as well (see
because they were infected with a bad attachment. You can configure a
secondary notification action, as well (see
). The notify action is not needed to inform users that a message
was modified if you choose to drop infected attachments.
•
X-IronPort-AV Header
All messages that are processed by the Anti-Virus scanning engine on the
appliance have the header
appliance have the header
X-IronPort-AV:
added to messages. This header
provides additional information to you when debugging issues with your
anti-virus configuration, particularly with messages that are considered
“unscannable.” You can toggle whether the X-IronPort-AV header is included
in messages that are scanned. Including this header is recommended.
anti-virus configuration, particularly with messages that are considered
“unscannable.” You can toggle whether the X-IronPort-AV header is included
in messages that are scanned. Including this header is recommended.
Message Handling Settings
You configure the virus scanning engine to handle four distinct classes of
messages that are received by a listener, with separate actions for each.
messages that are received by a listener, with separate actions for each.
summarizes the actions the system performs when the virus scanning engine is
enabled. See also
enabled. See also
and
for the GUI configuration.
For each of the following message types, you can choose which actions are
performed. The actions are described below (see
performed. The actions are described below (see
). For example, you can configure your
anti- virus settings for virus-infected messages so that the infected attachment is
dropped, the subject of the email is modified, and a custom alert is sent to the
message recipient.
dropped, the subject of the email is modified, and a custom alert is sent to the
message recipient.
Repaired Message Handling
Messages are considered repaired if the message was completely scanned and all
viruses have been repaired or removed. These messages will be delivered as is.
viruses have been repaired or removed. These messages will be delivered as is.
Filename: filename
Content-Type: application/filetype