Cisco Cisco Email Security Appliance C680 User Guide

archive the message

delete the message

Messages released from quarantines (see 

) are scanned for viruses. See 

 for more information about Anti-Virus scanning.

You can create content filters to be applied to messages on a per-recipient or per-sender basis. Content 
filters are similar to message filters, except that they are applied later in the email pipeline — after a 
message has been “splintered” into a number of separate messages for each matching Email Security 
Manager policy. The functionality of content filters is applied after message filters processing and 
anti-spam and anti-virus scanning have been performed on a message.

For more information about Content Filters, see 

Cisco IronPort’s Outbreak Filters feature includes special filters that act proactively to provide a critical 
first layer of defense against new outbreaks. Based on Outbreak Rules published by Cisco IronPort, 
messages with attachments of specific filetypes can be sent to a quarantine named Outbreak.

Messages in the Outbreak quarantine are processed like any other message in a quarantine. For more 
information about quarantines and the Work Queue, see 

.

See 

 for more information. 

Cisco IronPort AsyncOS allows you to filter incoming or outgoing messages and place them into 
quarantines. Quarantines are special queues or repositories used to hold and process messages. Messages 
in quarantines can be delivered or deleted, based on how you configure the quarantine.

The following Work Queue features can send messages to quarantines:

Message Filters

Anti-Virus

Outbreak Filters

Content Filters

Messages released from quarantines are re-scanned for viruses.

See the “Quarantines” chapter of the Cisco IronPort AsyncOS for Email Daily Management Guide for 
more information. 

The delivery phase of the Email Pipeline focuses on the final phase of email processing, including 
limiting connections, bounces, and recipients.