Cisco Cisco Email Security Appliance C190 Guía Del Usuario
9-317
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Chapter 9 Anti-Virus
Any message with multiple states causes a multi-part notification message
informing users what actions the appliance performed on the message (for
example, the user is notified that the message was repaired of a virus, but another
part of the message was encrypted).
informing users what actions the appliance performed on the message (for
example, the user is notified that the message was repaired of a virus, but another
part of the message was encrypted).
Archive Original Message
You can archive messages the system has identified as containing (or possibly
containing) viruses to the “avarchive” directory. The format is an mbox-format
log file. You must configure an “Anti-Virus Archive” log subscription to archive
messages with viruses or messages that could not be completely scanned. For
more information, refer to “Logging” in the Cisco IronPort AsyncOS for Email
Daily Management Guide for more information.
containing) viruses to the “avarchive” directory. The format is an mbox-format
log file. You must configure an “Anti-Virus Archive” log subscription to archive
messages with viruses or messages that could not be completely scanned. For
more information, refer to “Logging” in the Cisco IronPort AsyncOS for Email
Daily Management Guide for more information.
Note
In the GUI, you may need to click the “Advanced” link to reveal the “Archive
original message” setting.
original message” setting.
Sending Notifications
When the system has identified a message as containing viruses, you can send the
default notification to the sender, the recipient, and/or additional users. When
specifying additional users to notify, separate multiple addresses with commas (in
both the CLI and the GUI). The default notification messages are:
default notification to the sender, the recipient, and/or additional users. When
specifying additional users to notify, separate multiple addresses with commas (in
both the CLI and the GUI). The default notification messages are:
Table 9-4
Default Notifications for Anti-Virus Notifications
Verdict
Notification
Repaired
The following virus(es) was detected in a mail message: <virus
name(s)>
name(s)>
Actions taken: Infected attachment dropped (or Infected
attachment repaired).
attachment repaired).
Encrypted
The following message could not be fully scanned by the
anti-virus engine due to encryption.
anti-virus engine due to encryption.