Cisco Cisco Email Security Appliance C160 Guía Del Usuario
9-47
Cisco AsyncOS 8.5 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
Attachment Groups
You can specify a particular file type (“exe” files for example) or common groups of attachments in the
attachment-filetype
and
drop-attachments-by-filetype rules
. AsyncOS divides the attachments
into the groups listed in
If you create a message filter that uses the
!=
operator to match a message that does not contain an
attachment with a specific file type, the filter will not perform any action on the message if there is at
least one attachment with the file type you want to filter out. For example, the following filter drops any
message with an attachment that is not an
least one attachment with the file type you want to filter out. For example, the following filter drops any
message with an attachment that is not an
.exe
file type:
If a message has multiple attachments, the Email Security appliance does not drop the message if at least
one of the attachments is an
one of the attachments is an
.exe
file, even if the other attachments not
.exe
files.
Add Log Entry
log-entry
Adds customized text into the Text Mail logs at the
INFO
level. The text can include action variables. The log entry
appears in message tracking. See
appears in message tracking. See
Replace URL with
text, based on
URL Category
text, based on
URL Category
url-category-replace
Modify URLs or their behavior based on the category of
the URL.
the URL.
.
Defang URL based
on URL category
on URL category
url-category-defang
Redirect URL to
Cisco security
proxy, based on
URL category
Cisco security
proxy, based on
URL category
url-category-proxy-red
irect
No Operation
no-op
No action is performed. See
.
*Skip Remaining
Message Filters
Message Filters
skip-filters
Ensure that this message is not processed by any other
message filters and continues through the email pipeline.
See
message filters and continues through the email pipeline.
See
.
*Drop message
drop
Drop and discard the message. See
*Bounce message
bounce
Send the message back to the sender. See
*Encrypt and
Deliver Now
Deliver Now
encrypt
Use Cisco Email Encryption to encrypt outgoing
messages. See
messages. See
.
* Final Actions
Table 9-5
Message Filter Actions
Action Syntax
Description
exe_check: if (attachment-filetype != "exe") {
drop();
}