Cisco Cisco Email Security Appliance X1050 Merkblatt

Seite von 322
 
3-218
AsyncOS 9.6 for Cisco Email Security Appliances CLI 참조 가이드
 
     명령참조 예제
  정책 시행
문서 메타데이터는 검사합니다. 
첨부 파일 검사 시간 초과는 180초로 설정됩니다.
검사하지 않은 첨부 파일은 검색 패턴과 매치하지 않는 것으로 가정합니다. 이는 기본 동작입
니다.
일반 본문 텍스트 또는 MIME 유형이 plain/text이거나 plain/html인 텍스트에 대해 아무것도 지
정되지 않을 경우 ASCII 인코딩이 사용되도록 구성되었습니다.
참고
assume the attachment matches the search pattern
을 Y로 설정할 경우, 검사할 수 없는 메시지
에 메시지 필터 규칙을 적용하면 True가 됩니다. 그러면 뜻밖의 동작이 나올 수 있습니다. 이를테
면 사전과 매치하지 않는 메시지가 격리됩니다. 단, 그 이유는 내용을 제대로 검사하지 못했기 때
문입니다. 이 설정은 RSA 이메일 DLP 검사에는 적용되지 않습니다.
mail3.example.com> scanconfig
There are currently 5 attachment type mappings configured to be SKIPPED.
Choose the operation you want to perform:
- NEW - Add a new entry.
- DELETE - Remove an entry.
- SETUP - Configure scanning behavior.
- IMPORT - Load mappings from a file.
- EXPORT - Save mappings to a file.
- PRINT - Display the list.
- CLEAR - Remove all entries.
- SMIME - Configure S/MIME unpacking.
[]> setup
1. Scan only attachments with MIME types or fingerprints in the list.
2. Skip attachments with MIME types or fingerprints in the list.
Choose one:
[2]> 2
Enter the maximum depth of attachment recursion to scan:
[5]> 10
Enter the maximum size of attachment to scan:
[5242880]> 10m
Do you want to scan attachment metadata? [Y]> y
Enter the attachment scanning timeout (in seconds):
[30]> 180
If a message has attachments that were not scanned for any reason (e.g. 
because of size, depth limits, or scanning timeout), assume the attachment matches the 
search pattern? [N]> n
If a message could not be deconstructed into its component parts in order to remove 
specified attachments, the system should:
1. Deliver
2. Bounce
3. Drop
[1]> 
Configure encoding to use when none is specified for plain body text or
anything with MIME type plain/text or plain/html.
1. US-ASCII
2. Unicode (UTF-8)
3. Unicode (UTF-16)
4. Western European/Latin-1 (ISO 8859-1)