Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
9-104
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Configuring Scan Behavior
Configuring Scan Behavior
You can control the behavior of body and attachment scanning, such as the attachment types to be
skipped during a scan by configuring the scanning parameters. Use the Scan Behavior page or the
skipped during a scan by configuring the scanning parameters. Use the Scan Behavior page or the
scanconfig
command to configure these parameters. Scan behavior settings are global settings, meaning
that they affect the behavior of all the scans.
Note
If you want to scan a MIME type that may be included in a zip or compressed file, you must include list
'compressed' or 'zip' or 'application/zip' in the scan list.
'compressed' or 'zip' or 'application/zip' in the scan list.
Procedure
Step 1
Click Security Services > Scan Behavior.
Step 2
Define the attachment type mapping. Do one of the following:
•
Add a new attachment type mapping. Click Add Mapping.
•
Import a list of attachment type mappings using a configuration file. Click Import List, and import
the desired configuration file from the configuration directory.
the desired configuration file from the configuration directory.
Note
To perform this step, the configuration file must be present in the configuration directory of
your appliance. See
your appliance. See
•
Click Edit to modify an existing attachment type mapping.
Step 3
Configure the global settings. Do the following:
a.
Under Global Settings, click Edit Global Settings.
b.
Edit the desired fields:
Table 9-11
Field
Description
Action for attachments with MIME
types / fingerprints in table above
types / fingerprints in table above
Choose whether to scan or skip attachments types
defined in the attachment type mapping.
defined in the attachment type mapping.
Maximum depth of attachment
recursion to scan
recursion to scan
Specify the level up to which the recursive
attachments are to be scanned.
attachments are to be scanned.
Maximum attachment size to scan
Specify the maximum size of attachments to scan.
Attachment Metadata scan
Specify whether to scan or skip metadata of the
attachments.
attachments.
Attachment scanning timeout
Specify the scanning time-out period.
Assume attachment matches
pattern if not scanned for any
reason
pattern if not scanned for any
reason
Specify whether to consider unscanned
attachments as match to the search pattern.
attachments as match to the search pattern.
Action when message cannot be
deconstructed to remove specified
attachments
deconstructed to remove specified
attachments
Specify the action to be taken when a message
could not be deconstructed to remove specified
attachments.
could not be deconstructed to remove specified
attachments.