Cisco Cisco Email Security Appliance C160 Mode D'Emploi

When a virus has been detected, McAfee can repair (disinfect) the file. McAfee 
can usually repair any file in which a virus has been found, after which the file 
can be used without risk. The precise action taken depends on the virus. 

Occasionally, there can be limitations when it comes to disinfecting files because 
it is not always possible to return a file to its original state. Some viruses overwrite 
part of the executable program which cannot be reinstated. In this instance, you 
define how to handle messages with attachments that could not be repaired. You 
configure these settings on a per-recipient basis using the Email Security Feature: 
the Mail Policies > Incoming or Outgoing Mail Policies pages (GUI) or the 

policyconfig -> antivirus

 command (CLI). For more information on 

configuring these settings, see 

.

To perform virus scanning, you must first enable virus scanning on the Cisco 
IronPort appliance. After you enable the virus scanning engine or engines, you 
can apply the virus scanning engine to incoming or outgoing mail policies.

You can enable a virus scanning engine when you run the System Setup Wizard. 
Or, you can enable and modify the virus scanning engine global configuration 
settings via Security Services > Sophos/McAfee Anti-Virus pages (GUI) or the 

antivirusconfig

 command (CLI). You can configure the following global 

settings: 

Globally enable McAfee or Sophos anti-virus scanning for the entire system.

Specify the anti-virus scanning timeout value. 

In addition to the two values on the global settings page, you can further configure 
the anti-virus settings via the Service Updates page (available from the Security 
Services tab). Additional settings include: