Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
11-14
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 11 Content Filters
How Content Filters Work
Action Variables
Headers added to messages processed by content filters can contain variables that will be automatically
replaced with information from the original message when the action is executed. These special variables
are called action variables. Your Cisco appliance supports the following set of action variables:
replaced with information from the original message when the action is executed. These special variables
are called action variables. Your Cisco appliance supports the following set of action variables:
Table 11-4
Action Variables
Variable
Syntax
Description
All Headers
$AllHeaders
Replaced by the message headers.
Body Size
$BodySize
Replaced by the size, in bytes, of the
message.
message.
Date
$Date
Replaced by the current date, using the
format MM/DD/YYYY.
format MM/DD/YYYY.
Dropped File Name
$dropped_filename
Returns only the most recently dropped
filename.
filename.
Dropped File Names
$dropped_filenames
Same as
$filenames
, but displays list of
dropped files.
Dropped File Types
$dropped_filetypes
Same as
$filetypes
, but displays list of
dropped file types.
Envelope Sender
$envelopefrom
or
$envelopesender
Replaced by the Envelope Sender (Envelope
From, <MAIL FROM>) of the message.
From, <MAIL FROM>) of the message.
Envelope Recipients
$EnvelopeRecipients
Replaced by all Envelope Recipients
(Envelope To, <RCPT TO>) of the message.
(Envelope To, <RCPT TO>) of the message.
File Names
$filenames
Replaced with a comma-separated list of the
message’s attachments’ filenames.
message’s attachments’ filenames.
File Sizes
$filesizes
Replaced with a comma-separated list of the
message’s attachment’s file sizes.
message’s attachment’s file sizes.
File Types
$filetypes
Replaced with a comma-separated list of the
message's attachments' file types.
message's attachments' file types.
Filter Name
$FilterName
Replaced by the name of the filter being
processed.
processed.
GMTimeStamp
$GMTimeStamp
Replaced by the current time and date, as
would be found in the Received: line of an
email message, using GMT.
would be found in the Received: line of an
email message, using GMT.
HAT Group Name
$Group
Replaced by the name of the sender group
the sender matched on when injecting the
message. If the sender group had no name,
the string “
the sender matched on when injecting the
message. If the sender group had no name,
the string “
>Unknown<
” is inserted.
Mail Flow Policy
$Policy
Replaced by the name of the HAT policy
applied to the sender when injecting the
message. If no predefined policy name was
used, the string “
applied to the sender when injecting the
message. If no predefined policy name was
used, the string “
>Unknown<
” is inserted.