Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
12-15
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 12 Anti-Virus
How to Configure the Appliance to Scan for Viruses
lists some common Anti-Virus configuration options.
Flow Diagram for Anti-Virus Actions
appliance.
Table 12-4
Common Anti-Virus Configuration Options
Situation
Anti-Virus Configuration
Widespread Virus Outbreak
Any viral message is simply dropped
from the system with little other
processing taking place.
from the system with little other
processing taking place.
Drop-attachments: NO
Scanning: Scan-Only
Cleaned messages: Deliver
Unscannable messages: DROP message
Encrypted messages: Send to administrator or quarantine for
review.
review.
Viral messages: Drop message
Liberal Policy
As many documents as possible are
sent.
sent.
Drop-attachments: YES
Scanning: Scan and Repair
Cleaned messages: [VIRUS REMOVED] and Deliver
Unscannable messages: Forward as attachment
Encrypted messages: Mark and forward
Viral messages: Quarantine or mark and forward.
More Conservative Policy
Drop-attachments: YES
Scanning: Scan and Repair
Cleaned messages: [VIRUS REMOVED] and Deliver
(Archive cleaned messages for a more cautious policy.)
Unscannable messages: Send notification(s), quarantine, OR drop
and archive.
and archive.
Encrypted messages: Mark and forward OR treat as unscannable
Viral messages: Archive and drop
Conservative with Review
Possible virus messages are sent to
a quarantine mailbox so that an
administrator can review the
content.
a quarantine mailbox so that an
administrator can review the
content.
Drop-attachments: NO
Scanning: Scan-Only
Cleaned messages: Deliver (this action won't normally be taken)
Unscannable messages: Forward as attachment,
alt-src-host
, or
alt-rcpt-to
actions.
Encrypted messages: Treat as unscannable
Viral messages: Forward to quarantine or administrator.