Cisco Cisco Email Security Appliance C170 Guía Del Usuario
12-10
Cisco AsyncOS 8.5 for Email User Guide
Chapter 12 Anti-Virus
How to Configure the Appliance to Scan for Viruses
Any message with multiple states causes a multi-part notification message informing users what actions
the appliance performed on the message (for example, the user is notified that the message was repaired
of a virus, but another part of the message was encrypted).
the appliance performed on the message (for example, the user is notified that the message was repaired
of a virus, but another part of the message was encrypted).
Archive Original Message
You can archive messages the system has identified as containing (or possibly containing) viruses to the
“avarchive” directory. The format is an mbox-format log file. You must configure an “Anti-Virus
Archive” log subscription to archive messages with viruses or messages that could not be completely
scanned. For more information, see
“avarchive” directory. The format is an mbox-format log file. You must configure an “Anti-Virus
Archive” log subscription to archive messages with viruses or messages that could not be completely
scanned. For more information, see
Note
In the GUI, you may need to click the “Advanced” link to reveal the “Archive original message” setting.
Sending Notifications
When the system has identified a message as containing viruses, you can send the default notification to
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
Add Custom Header to Message
You can define an additional, custom header to be added to all messages that are scanned by the
anti-virus scanning engine. Click Yes and define the header name and text.
anti-virus scanning engine. Click Yes and define the header name and text.
You can also create filters that use the
skip-viruscheck
action so that certain messages bypass virus
scanning. See
.
Modify message recipient
You can modify the message recipient, causing the message to be delivered to a different address. Click
Yes and enter the new recipient address.
Yes and enter the new recipient address.
Infected
[WARNING: VIRUS DETECTED]
Repaired
[WARNING: VIRUS REMOVED]
Unscannable
[WARNING: A/V UNSCANNABLE]
Table 12-2
Default Subject Line Text for Anti-Virus Subject Line Modification
Table 12-3
Default Notifications for Anti-Virus Notifications
Verdict
Notification
Repaired
The following virus(es) was detected in a mail message: <virus name(s)>
Actions taken: Infected attachment dropped (or Infected attachment repaired).
Encrypted
The following message could not be fully scanned by the anti-virus engine due to
encryption.
encryption.
Unscannable
The following message could not be fully scanned by the anti-virus engine.
Infectious
The following unrepairable virus(es) was detected in a mail message: <virus
name(s)>.
name(s)>.