Cisco Cisco Email Security Appliance C690 User Guide
Chapter 5 Using Message Filters to Enforce Email Policies
5-348
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
File Names
$filenames
Returns a comma-separated list of
the message’s attachments’
filenames.
the message’s attachments’
filenames.
File Sizes
$filesizes
Returns a comma-separated list of
the message’s attachments file
sizes.
the message’s attachments file
sizes.
File Types
$filetypes
Returns a comma-separated list of
the message's attachments' file
types.
the message's attachments' file
types.
Filter Name
$FilterName
Returns the name of the filter
being processed.
being processed.
GMTimeStamp
$GMTimeStamp
Returns the current time and date,
as would be found in the Received:
line of an email message, using
GMT.
as would be found in the Received:
line of an email message, using
GMT.
HAT Group Name
$Group
Returns the name of the sender
group the sender matched on when
injecting the message. If the
sender group had no name, the
string “
group the sender matched on when
injecting the message. If the
sender group had no name, the
string “
>Unknown<
” is inserted.
Matched Content
$MatchedContent
Returns the content that triggered a
scanning filter rule (including
filter rules such as
scanning filter rule (including
filter rules such as
body-contains
and content dictionaries).
Mail Flow Policy
$Policy
Returns the name of the HAT
policy applied to the sender when
injecting the message. If no
predefined policy name was used,
the string “
policy applied to the sender when
injecting the message. If no
predefined policy name was used,
the string “
>Unknown<
” is inserted.
Header
$Header['string']
Returns the value of the quoted
header, if the original message
contains a matching header. Note
that double quotes may also be
used.
header, if the original message
contains a matching header. Note
that double quotes may also be
used.
Table 5-7
Message Filter Action Variables (Continued)
Variable
Syntax
Description