Cisco Cisco Email Security Appliance C190 Technical References
212
Cisco AsyncOS 9.1 for Email CLI Reference Guide
Chapter 3 The Commands: Reference Examples
Policy Enforcement
Note
You will only be prompted to give users access to the quarantine if guest or operator users have already
been created on the system.
been created on the system.
A quarantine's user list only contains users belonging to the Operators or Guests groups. Users in the
Administrators group always have full access to the quarantine. When managing the user list, the NEW
command is suppressed if all the Operator/Guest users are already on the quarantine's user list. Similarly,
DELETE is suppressed if there are no users to delete.
Administrators group always have full access to the quarantine. When managing the user list, the NEW
command is suppressed if all the Operator/Guest users are already on the quarantine's user list. Similarly,
DELETE is suppressed if there are no users to delete.
scanconfig
Description
Configure attachment scanning policy
Usage
Commit: This command requires a ‘commit’.
Cluster Management: This command can be used in all three machine modes (cluster, group, machine).
Batch Command: This command supports a batch format.
Example
In this example, the
scanconfig
command sets these parameters:
•
MIME types of video/*, audio/*, image/* are skipped (not scanned for content).
•
Nested (recursive) archive attachments up to 10 levels are scanned. (The default is 5 levels.)
•
The maximum size for attachments to be scanned is 25 megabytes; anything larger will be skipped.
(The default is 5 megabytes.)
(The default is 5 megabytes.)
•
The document metadata is scannned.
•
Attachment scanning timeout is set at 180 seconds.
•
Attachments that were not scanned are assumed to not match the search pattern. (This is the default
behavior.)
behavior.)
•
ASCII encoding is configured for use when none is specified for plain body text or anything with
MIME type plain/text or plain/html.
MIME type plain/text or plain/html.
Note
When setting the
assume the attachment matches the search pattern
to Y, messages that cannot be
scanned will cause the message filter rule to evaluate to true. This could result in unexpected behavior,
such as the quarantining of messages that do not match a dictionary, but were quarantined because their
content could not be correctly scanned. This setting does not apply to RSA Email DLP scanning.
such as the quarantining of messages that do not match a dictionary, but were quarantined because their
content could not be correctly scanned. This setting does not apply to RSA Email DLP scanning.
mail3.example.com> scanconfig
There are currently 5 attachment type mappings configured to be SKIPPED.
Choose the operation you want to perform:
- NEW - Add a new entry.
- DELETE - Remove an entry.