Cisco Cisco Email Security Appliance C170 Betriebsanweisung

Choose which overall action to take on each message type for encrypted, 
unscannable, or virus positive messages: drop the message, deliver the message 
as an attachment to a new message, deliver the message as is, or send the message 
to the anti-virus quarantine area (

). See the “Quarantines” chapter in Cisco IronPort AsyncOS for Email 

Daily Management Guide for more information about quarantines.

Configuring the appliance to deliver the infected messages as an attachment to a 
new message allows the recipient to choose how to deal with the original, infected 
attachment. 

If you choose to deliver the message or deliver the message as an attachment to a 
new message, you can additionally: 

Modify message subject

Archive original message

Send generic notification
The following actions are available in the “Advanced” section of the GUI:

Add custom header to message

Modify message recipient

Send message to alternate destination host

Send custom alert notification (to recipient only)

These actions are not mutually exclusive; you can combine some or all of them 
differently within different incoming or outgoing policies for different processing 
needs for groups of users. See the following sections and 

 for more information on defining various scanning 

policies using these options.