Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
5-379
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Chapter 5 Using Message Filters to Enforce Email Policies
Viewing Verdict Results
To see the verdict score for a particular message, you can view the mail logs. The
mail logs display the image name or file name, the score for a particular message
attachment. In addition, the log displays information about whether the images in
a file were scannable or unscannable. Note that information in the log describes
the result for each message attachment, rather than each image. For example, if
the message had a zip attachment that contained a JPEG image, the log entry
would contain the name of the zip file rather than the name of the JPEG. Also, if
the zip file included multiple images then the log entry would include the
maximum score of all the images. The unscannable notation indicates whether
any of the images were unscannable.
mail logs display the image name or file name, the score for a particular message
attachment. In addition, the log displays information about whether the images in
a file were scannable or unscannable. Note that information in the log describes
the result for each message attachment, rather than each image. For example, if
the message had a zip attachment that contained a JPEG image, the log entry
would contain the name of the zip file rather than the name of the JPEG. Also, if
the zip file included multiple images then the log entry would include the
maximum score of all the images. The unscannable notation indicates whether
any of the images were unscannable.
The log does not contain information about how the scores translate to a particular
verdict (clean, suspect or inappropriate). However, because you can use mail logs
to track the delivery of specific messages, you can determine by the actions
performed on the messages whether the mail contained inappropriate or suspect
images.
verdict (clean, suspect or inappropriate). However, because you can use mail logs
to track the delivery of specific messages, you can determine by the actions
performed on the messages whether the mail contained inappropriate or suspect
images.
For example, the following mail log shows attachments dropped by message filter
rules as a result of Image Analysis scanning:
rules as a result of Image Analysis scanning:
Please enter minimum image size to scan in pixels, representing either
height or width of a given image.
[100]>
Thu Apr 3 08:17:56 2009 Debug: MID 154 IronPort Image Analysis: image
'Unscannable.jpg' is unscannable.
Thu Apr 3 08:17:56 2009 Info: MID 154 IronPort Image Analysis:
attachment 'Unscannable.jpg' score 0 unscannable
Thu Apr 3 08:17:56 2009 Info: MID 6 rewritten to MID 7 by
drop-attachments-where-image-verdict filter 'f-001'