Cisco Cisco Email Security Appliance C690 User Guide

When this option is enabled, the original subject header of each message is 
included in the log.

In some cases, it is necessary to record the presence and contents of a message’s 
headers as they pass through the system. You specify the headers to record in the 
Log Subscriptions Global Settings page (or via the 

logconfig

 -> 

logheaders

 

subcommand in the CLI). The Cisco IronPort appliance records the specified 
message headers in the IronPort Text Mail Logs, the IronPort Delivery Logs, and 
the IronPort Bounce Logs. If the header is present, the system records the name 
of the header and the value. If a header is not present, nothing is recorded in the 
logs.

The system evaluates all headers that are present on a message, at any time during 
the processing of the message for recording, regardless of the headers specified 
for logging.

The RFC for the SMTP protocol is located at 

 

http://www.faqs.org/rfcs/rfc2821.html

 and defines user-defined headers. 

Tue May 31 09:20:27 2005 Info: Start MID 2 ICID 2

Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 From: <mary@example.com>

Tue May 31 09:20:27 2005 Info: MID 2 ICID 2 RID 0 To: <joe@example.com>

Tue May 31 09:20:27 2005 Info: MID 2 Message-ID '<44e4n$2@example.com>'

Tue May 31 09:20:27 2005 Info: MID 2 Subject 'Monthly Reports Due'