Cisco Cisco Email Security Appliance C190 Technical References

- LOGCONFIG - Configure log subscriptions used by filters.

- ROLLOVERNOW - Roll over a filter log file.

[]> new

Enter filter script.  Enter '.' on its own line to end.

1 filters added.

Choose the operation you want to perform:

- NEW - Create a new filter.

- DELETE - Remove a filter.

- IMPORT - Import a filter script from a file.

- EXPORT - Export filters to a file

- MOVE - Move a filter to a different position.

- SET - Set a filter attribute.

- LIST - List the filters.

- DETAIL - Get detailed information on the filters.

- LOGCONFIG - Configure log subscriptions used by filters.

- ROLLOVERNOW - Roll over a filter log file.

[]> list

Configure per recipient or sender based policies.

Commit: This command requires a ‘commit’.

Cluster Management: This command can be used in all three machine modes (cluster, group, machine).

Batch Command: This command does not support a batch format.

In this example, the 

policyconfig -> edit ->

 

antispam

 subcommand is used to edit the Anti-Spam 

settings for the default incoming mail policy. (Note that this same configuration is available in the GUI 
from the Email Security Manager feature.)

First, messages positively identified as spam are chosen not to be archived; they will be dropped. 

Messages that are suspected to be spam are chosen to be archived. They will also be sent to the Spam 
Quarantine installed on the server named 

quarantine.example.com

. The text 

[quarantined: 

possible spam]

 is prepended to the subject line and a special header of 

X-quarantined: true

 is 

configured to be added to these suspect messages. In this scenario, Administrators and end-users can 
check the quarantine for false positives, and an administrator can adjust, if necessary, the suspected 
spam threshold.

Unwanted marketing messages are delivered with the text 

[MARKETING]

 prepended to the subject 

line.