Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
4-9
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 4 Understanding the Email Pipeline
•
archive the message
•
delete the message
Messages released from quarantines (see
) are scanned for viruses. See
for more information about Anti-Virus scanning.
Content Filters
You can create content filters to be applied to messages on a per-recipient or per-sender basis. Content
filters are similar to message filters, except that they are applied later in the email pipeline — after a
message has been “splintered” into a number of separate messages for each matching Email Security
Manager policy. The functionality of content filters is applied after message filters processing and
anti-spam and anti-virus scanning have been performed on a message.
filters are similar to message filters, except that they are applied later in the email pipeline — after a
message has been “splintered” into a number of separate messages for each matching Email Security
Manager policy. The functionality of content filters is applied after message filters processing and
anti-spam and anti-virus scanning have been performed on a message.
For more information about Content Filters, see
Outbreak Filters
Cisco IronPort’s Outbreak Filters feature includes special filters that act proactively to provide a critical
first layer of defense against new outbreaks. Based on Outbreak Rules published by Cisco IronPort,
messages with attachments of specific filetypes can be sent to a quarantine named Outbreak.
first layer of defense against new outbreaks. Based on Outbreak Rules published by Cisco IronPort,
messages with attachments of specific filetypes can be sent to a quarantine named Outbreak.
Messages in the Outbreak quarantine are processed like any other message in a quarantine. For more
information about quarantines and the Work Queue, see
information about quarantines and the Work Queue, see
.
See
for more information.
Quarantines
Cisco IronPort AsyncOS allows you to filter incoming or outgoing messages and place them into
quarantines. Quarantines are special queues or repositories used to hold and process messages. Messages
in quarantines can be delivered or deleted, based on how you configure the quarantine.
quarantines. Quarantines are special queues or repositories used to hold and process messages. Messages
in quarantines can be delivered or deleted, based on how you configure the quarantine.
The following Work Queue features can send messages to quarantines:
•
Message Filters
•
Anti-Virus
•
Outbreak Filters
•
Content Filters
Messages released from quarantines are re-scanned for viruses.
See the “Quarantines” chapter of the Cisco IronPort AsyncOS for Email Daily Management Guide for
more information.
more information.
Delivery
The delivery phase of the Email Pipeline focuses on the final phase of email processing, including
limiting connections, bounces, and recipients.
limiting connections, bounces, and recipients.