Cisco Cisco Email Security Appliance C650 Guía Del Usuario
12-8
Cisco AsyncOS 9.1 for Email User Guide
Chapter 12 Anti-Virus
How to Configure the Appliance to Scan for Viruses
Message Scanning Settings
•
Scan for Viruses Only:
Messages processed by the system are scanned for viruses. Repairs are not attempted for infected
attachments. You can choose whether to drop attachments and deliver mail for messages that contain
viruses or could not be repaired.
attachments. You can choose whether to drop attachments and deliver mail for messages that contain
viruses or could not be repaired.
•
Scan and Repair Viruses:
Messages processed by the system are scanned for viruses. If a virus is found in an attachment, the
system will attempt to “repair” the attachment.
system will attempt to “repair” the attachment.
•
Dropping Attachments
You can choose to drop infected attachments.
When infected attachments to messages have been scanned and dropped by the anti-virus scanning
engine, the attachment is replaced with a new attachment called “Removed Attachment.” The
attachment type is text/plain and contains the following:
engine, the attachment is replaced with a new attachment called “Removed Attachment.” The
attachment type is text/plain and contains the following:
Users will always be notified if their messages were modified in any way because they were infected
with a bad attachment. You can configure a secondary notification action, as well (see
with a bad attachment. You can configure a secondary notification action, as well (see
). The notify action is not needed to inform users that a message was
modified if you choose to drop infected attachments.
•
X-IronPort-AV Header
All messages that are processed by the Anti-Virus scanning engine on the appliance have the header
X-IronPort-AV:
added to messages. This header provides additional information to you when
debugging issues with your anti-virus configuration, particularly with messages that are considered
“unscannable.” You can toggle whether the X-IronPort-AV header is included in messages that are
scanned. Including this header is recommended.
“unscannable.” You can toggle whether the X-IronPort-AV header is included in messages that are
scanned. Including this header is recommended.
Message Handling Settings
You configure the virus scanning engine to handle four distinct classes of messages that are received by
a listener, with separate actions for each.
a listener, with separate actions for each.
summarizes the actions the system performs when
the virus scanning engine is enabled.
For each of the following message types, you can choose which actions are performed. The actions are
described below (see
described below (see
). For example, you
can configure your anti- virus settings for virus-infected messages so that the infected attachment is
dropped, the subject of the email is modified, and a custom alert is sent to the message recipient.
dropped, the subject of the email is modified, and a custom alert is sent to the message recipient.
Related Topics
•
•
•
•
This attachment contained a virus and was stripped.
Filename: filename
Content-Type: application/filetype