Cisco Cisco Email Security Appliance C680 Guía Del Usuario
9-12
Cisco AsyncOS 9.0 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
S/MIME Gateway
Verified
Verified
smime-gateway-verified
Is the S/MIME message successfully verified,
decrypted, or decrypted and verified? See
decrypted, or decrypted and verified? See
Image verdict
image-verdict
What was the image scanning verdict? This filter
rule allows you to query for different image
analysis verdicts. See
rule allows you to query for different image
analysis verdicts. See
Workqueue count
workqueue-count
Is the work queue count equal to, less than, or
greater than the specified value? See
greater than the specified value? See
.
Body Scanning
body-contains(<regular
expression>)
Does the message contain text or an attachment
that matches a specified pattern? Does the
pattern occur the minimum number of times you
specified for the threshold value?
that matches a specified pattern? Does the
pattern occur the minimum number of times you
specified for the threshold value?
The engine scans delivery-status parts and
associated attachments.
associated attachments.
See
.
Body Scanning
only-body-contains(<regular
expression>)
Does the message body contain text that matches
a specified pattern? Does the pattern occur the
minimum number of times you specified for the
threshold value? Attachments are not scanned.
See
a specified pattern? Does the pattern occur the
minimum number of times you specified for the
threshold value? Attachments are not scanned.
See
.
Encryption
Detection
Detection
encrypted
Is the message encrypted? See
Attachment
Filename
Filename
a
attachment-filename
Does the message contain an attachment with a
filename that matches a specific pattern? See
filename that matches a specific pattern? See
Attachment Type
a
attachment-type
Does the message contain an attachment of a
particular MIME type? See
particular MIME type? See
.
Table 9-2
Message Filter Rules
Rule Syntax
Description