Cisco Cisco Email Security Appliance C190 Guía Del Usuario
9-52
Cisco AsyncOS 8.5 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
Matched Content Visibility
When you configure a quarantine action for messages that match Attachment Content conditions,
Message Body or Attachment conditions, Message body conditions, or the Attachment content
conditions, you can view the matched content in the quarantined message. When you display the
message body, the matched content is highlighted in yellow. You can also use the $MatchedContent
action variable to include the matched content in the message subject.
Message Body or Attachment conditions, Message body conditions, or the Attachment content
conditions, you can view the matched content in the quarantined message. When you display the
message body, the matched content is highlighted in yellow. You can also use the $MatchedContent
action variable to include the matched content in the message subject.
When you view messages in the local quarantine that have triggered message or content filter rules, the
GUI may display content that did not actually trigger the filter action (along with content that triggered
the filter action). The GUI display should be used as a guideline for locating content matches, but does
not necessarily reflect an exact list of content matches. This occurs because the GUI uses less strict
content matching logic than is used in the filters. This issue applies only to the highlighting in the
message body. The table that lists the matched strings in each part of the message along with the
associated filter rule is correct.
GUI may display content that did not actually trigger the filter action (along with content that triggered
the filter action). The GUI display should be used as a guideline for locating content matches, but does
not necessarily reflect an exact list of content matches. This occurs because the GUI uses less strict
content matching logic than is used in the filters. This issue applies only to the highlighting in the
message body. The table that lists the matched strings in each part of the message along with the
associated filter rule is correct.
Figure 9-2
Matched Content Viewed in the Policy Quarantine
Description and Examples of Message Filter Actions
The following section describes the various message filter actions in use and their examples.
Skip Remaining Message Filters Action
The
skip-filters
action ensures that the message skips any further processing from message filters and
continues through the email pipeline. The message that incurs the
skip-filters
action will be subject
to anti-spam scanning and anti-virus scanning, if it is available on the appliance. The
skip-filters
action is the default final action for message filters.
The following filter notifies
customercare@example.com
and then immediately delivers any message
addressed to
boss@admin
.
bossFilter:
if(rcpt-to == 'boss@admin$')