Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Scan for Viruses Only:

Messages processed by the system are scanned for viruses. Repairs are not attempted for infected 
attachments. You can choose whether to drop attachments and deliver mail for messages that contain 
viruses or could not be repaired.

Scan and Repair Viruses:

Messages processed by the system are scanned for viruses. If a virus is found in an attachment, the 
system will attempt to “repair” the attachment. 

Dropping Attachments 

You can choose to drop infected attachments. 

When infected attachments to messages have been scanned and dropped by the anti-virus scanning 
engine, the attachment is replaced with a new attachment called   “Removed Attachment.” The 
attachment type is text/plain and contains the following:

Users will always be notified if their messages were modified in any way because they were infected 
with a bad attachment. You can configure a secondary notification action, as well (see 

). The notify action is not needed to inform users that a message was 

modified if you choose to drop infected attachments. 

X-IronPort-AV Header

All messages that are processed by the Anti-Virus scanning engine on the appliance have the header 

X-IronPort-AV:

 added to messages. This header provides additional information to you when 

debugging issues with your anti-virus configuration, particularly with messages that are considered 
“unscannable.” You can toggle whether the X-IronPort-AV header is included in messages that are 
scanned. Including this header is recommended.

You configure the virus scanning engine to handle four distinct classes of messages that are received by 
a listener, with separate actions for each. 

 summarizes the actions the system performs when 

the virus scanning engine is enabled. 

For each of the following message types, you can choose which actions are performed. The actions are 
described below (see 

). For example, you 

can configure your anti- virus settings for virus-infected messages so that the infected attachment is 
dropped, the subject of the email is modified, and a custom alert is sent to the message recipient.

This attachment contained a virus and was stripped.

     Filename: filename

 Content-Type: application/filetype