Cisco Cisco Email Security Appliance C680 User Guide

outgoing mail policy tables manage which content filters are enabled the order in 
which they will be applied for any given policy. 

 lists the available 

conditions you can use to create a content filter. 

 lists the non-final and 

final actions you can use to define a content filter. Together, conditions and action 
constitute a content filter. 

 shows the action variables you can use when 

creating content filters.

Specifying conditions in content filters is optional. 

In the content filter conditions, when you add filter rules that search for patterns 
in the message body or attachments, you can specify the minimum threshold for 
the number of times the pattern must be found. When AsyncOS scans the 
message, it totals the “score” for the number of matches it finds in the message 
and attachments. If the minimum threshold is not met, the regular expression does 
not evaluate to true. You can specify this threshold for text, smart identifiers, or 
content dictionary terms. 

You can also use “smart identifiers” to identify patterns in data. Smart identifiers 
can detect the following patterns:

Credit card numbers

U.S. Social Security numbers

CUSIP (Committee on Uniform Security Identification Procedures) numbers

ABA (American Banking Association) routing numbers

For more information about specifying a minimum threshold for the number of 
times a pattern must be found, and smart identifiers, see the “Using Message 
Filters to Enforce Email Policies” chapter in the Cisco IronPort AsyncOS for 
Email Advanced Configuration Guide.