Cisco Cisco Email Security Appliance C680 Guía Del Usuario

$Policy

Replaced by the name of the HAT 
policy applied to the sender when 
injecting the message. If no 
predefined policy name was used, 
the string “

>Unknown<

” is inserted.

$MatchedContent

Replaced by the value (or values) 
that triggered a content-scanning 
filter. Matched content can be a 
content dictionary match, a smart 
identifier, or a match to a regular 
expression.

$Header['string']

Replaced by the value of the 
quoted header, if the original 
message contains a matching 
header. Note that double quotes 
may also be used.

$Hostname

Replaced by the hostname of the 
Cisco IronPort appliance.

$MID

Replaced by the Message ID, or 
“MID” used internally to identify 
the message. Not to be confused 
with the RFC822 “Message-Id” 
value (use $Header to retrieve 
that).

$RecvListener

Replaced by the nickname of the 
listener that received the message.

$RecvInt

Replaced by the nickname of the 
interface that received the 
message.

$RemoteIP

Replaced by the IP address of the 
system that sent the message to the 
Cisco IronPort appliance.