Cisco Cisco Email Security Appliance C170 Guía Del Usuario

$filetypes

Replaced with a comma-separated list of the 
message's attachments' file types.

$FilterName

Replaced by the name of the filter being 
processed. 

$GMTimeStamp

Replaced by the current time and date, as 
would be found in the Received: line of an 
email message, using GMT.

$Group

Replaced by the name of the sender group 
the sender matched on when injecting the 
message. If the sender group had no name, 
the string “

>Unknown<

” is inserted.

$Policy

Replaced by the name of the HAT policy 
applied to the sender when injecting the 
message. If no predefined policy name was 
used, the string “

>Unknown<

” is inserted.

$MatchedContent

Replaced by the value (or values) that 
triggered a content-scanning filter. Matched 
content can be a content dictionary match, a 
smart identifier, or a match to a regular 
expression.

$Header['string']

Replaced by the value of the quoted header, 
if the original message contains a matching 
header. Note that double quotes may also be 
used.

$Hostname

Replaced by the hostname of the Cisco 
IronPort appliance.

$MID

Replaced by the Message ID, or “MID” used 
internally to identify the message. Not to be 
confused with the RFC822 “Message-Id” 
value (use $Header to retrieve that).

$RecvListener

Replaced by the nickname of the listener 
that received the message.

$RecvInt

Replaced by the nickname of the interface 
that received the message.

$RemoteIP

Replaced by the IP address of the system 
that sent the message to the Cisco IronPort 
appliance.

$remotehost

Replaced by the hostname of the system that 
sent the message to the Cisco IronPort 
appliance. 

$Reputation

Replaced by the SenderBase Reputation 
score of the sender. If there is no reputation 
score, it is replaced with “

None

”. 

$Subject

Replaced by the subject of the message.