Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 652
Chapter 9      Anti-Virus
9-6
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Sophos Alerts 
Cisco encourages customers who enable Sophos Anti-Virus scanning to subscribe 
to Sophos alerts on the Sophos site at 
http://www.sophos.com/virusinfo/notifications/. 
Subscribing to receive alerts directly from Sophos will ensure you are apprised of 
the latest virus outbreaks and their available solutions.
When a Virus is Found
When a virus has been detected, Sophos Anti-Virus can repair (disinfect) the file. 
Sophos Anti-Virus can usually repair any file in which a virus has been found, 
after which the file can be used without risk. The precise action taken depends on 
the virus. 
There can be limitations when it comes to disinfecting, because it is not always 
possible to return a file to its original state. Some viruses overwrite part of the 
executable program which cannot be reinstated. In this instance, you define how 
to handle messages with attachments that could not be repaired. You configure 
these settings on a per-recipient basis using the Email Security Feature: the Mail 
Policies > Incoming or Outgoing Mail Policies pages (GUI) or the 
policyconfig 
-> antivirus
 command (CLI). For more information on configuring these 
settings, see 
.
McAfee Anti-Virus Filtering
The McAfee® scanning engine:
Scans files by pattern-matching virus signatures with data from your files. 
Decrypts and runs virus code in an emulated environment. 
Applies heuristic techniques to recognize new viruses. 
Removes infectious code from files.