Cisco Cisco Email Security Appliance C680 User Guide

Page of 1094
 
9-44
Cisco AsyncOS 8.0.1 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
Drop Attachments 
by Content
drop-attachments-wher
e-contains
Drop all attachments on message that contain the regular 
expression. Does the pattern occur the minimum number 
of times you specified for the threshold value? Archive 
files (zip, tar) will be dropped if any of the files they 
contain match the regular expression pattern. See 
.
The optional comment serves as the means to modify the 
text used to replace the attachment that was dropped. 
Attachment footers simply append to the message.
Drop Attachments 
by Dictionary 
Matches
drop-attachments-wher
e-dictionary-match
Strip attachments based on matches to dictionary terms. If 
the terms in the MIME parts considered to be an 
attachment match a dictionary term (and the user-defined 
threshold is met), the attachment is stripped from the 
email. See 
.
Add Footer
add-footer(footer-nam
e)
Add disclaimer text as a footer to the message. See 
“Message Disclaimer Stamping” in the “Text Resources” 
chapter for more information. 
Add Heading
add-heading(heading-n
ame)
Add disclaimer text as a heading to the message. See 
“Message Disclaimer Stamping” in the “Text Resources” 
chapter for more information.
Encrypt on 
Delivery
encrypt-deferred
Encrypt message on delivery, which means that the 
message continues to the next stage of processing, and 
when all processing is complete, the message is encrypted 
and delivered.
Add Message Tag
tag-message(tag-name)
Add a custom term into the message to use with RSA 
Email DLP policy filtering. You can configure a RSA 
Email DLP policy to limit scanning to messages with the 
message tag. The message tag is not visible to recipients. 
See 
Loss Prevention” chapter.
Add Log Entry
log-entry
Adds customized text into the IronPort Text Mail logs at 
the 
INFO
 level. The text can include action variables. The 
log entry appears in message tracking. See 
.
*Skip Remaining 
Message Filters
skip-filters
Ensure that this message is not processed by any other 
message filters and continues through the email pipeline. 
See 
*Drop message
drop
Drop and discard the message. See 
.
*Bounce message
bounce
Send the message back to the sender. See 
.
Table 9-5
Message Filter Actions
Action Syntax 
Description