Cisco Cisco Email Security Appliance C160 Guía Del Usuario
11-2
Cisco AsyncOS 8.5 for Email User Guide
Chapter 11 Content Filters
How Content Filters Work
How to Scan Message Content Using a Content Filter
Content Filter Conditions
A condition is a “trigger” that determines whether the Email Security appliance uses the filter on a
message that matches the associated mail policy. Specifying conditions for a content filter is optional.
Content filters without a condition are applied to all messages that match the associated mail policy.
message that matches the associated mail policy. Specifying conditions for a content filter is optional.
Content filters without a condition are applied to all messages that match the associated mail policy.
In the content filter conditions, when you add filter rules that search for certain patterns in the message
body or attachments, you can specify the minimum threshold for the number of times the pattern must
be found. When AsyncOS scans the message, it totals the “score” for the number of matches it finds in
the message and attachments. If the minimum threshold is not met, the regular expression does not
evaluate to true. You can specify this threshold for text, smart identifiers, or content dictionary terms.
body or attachments, you can specify the minimum threshold for the number of times the pattern must
be found. When AsyncOS scans the message, it totals the “score” for the number of matches it finds in
the message and attachments. If the minimum threshold is not met, the regular expression does not
evaluate to true. You can specify this threshold for text, smart identifiers, or content dictionary terms.
Table 11-1
How to Scan for Message Content Using a Content Filter
Do This
More Info
Step 1
(Optional) Define the supporting features for
the content filter.
the content filter.
Create any of the following items that you want to
your content filter:
your content filter:
•
Encryption Profile
•
Disclaimer template
•
Notification template
•
Policy quarantine
•
URL whitelists
Step 2
Define the incoming or outgoing content filter. A content filter may comprise of three parts:
•
(optional)
•
•
(optional)
Step 3
Define the group of users for whom you want
to set up content security rules.
to set up content security rules.
Create an incoming or outgoing mail policy.
Step 4
Assign the content filter to the group of user
whose incoming or outgoing messages you
want to use the filter for.
whose incoming or outgoing messages you
want to use the filter for.
See