Cisco Cisco Email Security Appliance C170 Guía Del Usuario

Is the body size within a specified range? Body size refers to the size of the 
message, including both headers and attachments. The body-size rule 
selects those messages where the body size compares as directed to a 
specified number.

Contains text. Does the message contain an attachment that contains text 
or another attachment that matches a specific pattern? This rule is similar 
to the 

body-contains()

 rule, but it attempts to avoid scanning the entire 

“body” of the message. That is, it attempts to scan only that which the user 
would view as being an attachment.

Contains a smart identifier. Does content in the message attachment 
match the specified smart identifier?

Contains terms in content dictionary. Does the attachment contain any 
of the regular expressions or terms in the content dictionary named 
<dictionary name>?

To search for dictionary terms, the dictionary must already have been 
created. See 

.

Number of matches required. Specify the number of matches required 
for the rule to evaluate to true. You can specify this threshold for text, smart 
identifier, or content dictionary matches.

Filename. Does the message contain an attachment with a filename that 
matches a specific pattern?

File type. Does the message contain an attachment of a file type that 
matches a specific pattern based on its fingerprint (similar to a UNIX 

file

 

command)? 

MIME type. Does the message contain an attachment of a specific MIME 
type? This rule is similar to the 

attachment-type

 rule, except only the 

MIME type given by the MIME attachment is evaluated. (The appliance 
does not try to “guess” the type of the file by its extension if there is no 
explicit type given.) 

Image Analysis. Does the message contain an image attachment that 
matches the image verdict specified? Valid image analysis verdicts 
include: Suspect, Inappropriate, Suspect or Inappropriate, Unscannable, 
or Clean.