Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Values are case-sensitive. 

To send notifications to end users when a suspect attachment or its parent message has been dropped 
based on file reputation scanning, use an X-header or Custom Header and Content Filters. See a similar 
configuration example at 

. 

If you use centralized management, you can enable Advanced Malware Protection and mail policies at 
the cluster, group and machine level. 

Feature keys must be added at the machine level. 

Ensure that the appliance is configured to send you alerts related to Advanced Malware Protection.  

You will receive alerts when: 

X-Amp-Result Clean

Malicious

Unscannable

Verdict applied to messages processed by the 
file reputation service. 

X-Amp-Original-Verdict

file unknown

verdict unknown

Verdict before adjustment based on reputation 
threshold. This header exists only if the 
original verdict is one of the possible values. 

X-Amp-File-Uploaded

true

false

If any file attached to a message was sent for 
analysis, this header is "true." 

Feature keys expire 

(As is standard for all features)

The file reputation service is unreachable

System 

Warning

The file analysis service is unreachable

System 

Warning

A file reputation verdict changes 

System 

Info

The reputation and analysis engine is restarted by a watchdog 
service 

System Info