Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
4-9
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Chapter 4 Understanding the Email Pipeline
Work Queue / Routing
The Work Queue is where the received message is processed before moving to the
delivery phase. Processing includes masquerading, routing, filtering,
safelist/blocklist scanning, anti-spam and anti-virus scanning, Outbreak Filters,
and quarantining.
delivery phase. Processing includes masquerading, routing, filtering,
safelist/blocklist scanning, anti-spam and anti-virus scanning, Outbreak Filters,
and quarantining.
Note
Data loss prevention (DLP) scanning is only available for outgoing messages. For
information on where DLP message scanning occurs in the Work Queue, see
information on where DLP message scanning occurs in the Work Queue, see
.
Email Pipeline and Security Services
It is recommended that you enable and avoid changing security services
on Cloud Email Security appliances.
Note, as a general rule, changes to security services (anti-spam scanning,
anti-virus scanning, and Outbreak Filters) do not affect messages already in the
work queue. As an example:
anti-virus scanning, and Outbreak Filters) do not affect messages already in the
work queue. As an example:
If a message bypasses anti-virus scanning when it first enters the pipeline because
of any of these reasons:
of any of these reasons:
–
anti-virus scanning was not enabled globally for the appliance, or
–
the HAT policy was to skip anti-virus scanning, or
–
there was a message filter that caused the message to bypass anti-virus
scanning,
scanning,
then the message will not be anti-virus scanned upon release from the quarantine,
regardless of whether anti-virus scanning has been re-enabled. However,
messages that bypass anti-virus scanning due to mail policies may be anti-virus
scanned upon release from a quarantine, as the mail policy's settings may have
changed while the message was in the quarantine. For example, if a message
bypasses anti-virus scanning due to a mail policy and is quarantined, then, prior
to release from the quarantine, the mail policy is updated to include anti-virus
scanning, the message will be anti-virus scanned upon release from the
quarantine.
regardless of whether anti-virus scanning has been re-enabled. However,
messages that bypass anti-virus scanning due to mail policies may be anti-virus
scanned upon release from a quarantine, as the mail policy's settings may have
changed while the message was in the quarantine. For example, if a message
bypasses anti-virus scanning due to a mail policy and is quarantined, then, prior
to release from the quarantine, the mail policy is updated to include anti-virus
scanning, the message will be anti-virus scanned upon release from the
quarantine.