Cisco Cisco Email Security Appliance C160 Mode D'Emploi
18-38
Cisco AsyncOS 9.5 for Email User Guide
Chapter 18 Data Loss Prevention
Showing or Hiding Sensitive DLP Data in Message Tracking
Showing or Hiding Sensitive DLP Data in Message Tracking
Both RSA Email DLP and RSA Enterprise Manager deployments offer the option to log the content that
violates your DLP policies, along with the surrounding content, which can then be viewed in Message
Tracking. This content may include sensitive data such as credit card numbers and social security
numbers. You can opt not to log this content.
violates your DLP policies, along with the surrounding content, which can then be viewed in Message
Tracking. This content may include sensitive data such as credit card numbers and social security
numbers. You can opt not to log this content.
Before You Begin
Enable Message Tracking. See
$filenames
Replaced with a comma-separated list of the message’s
attachments’ filenames.
attachments’ filenames.
$filetypes
Replaced with a comma-separated list of the message's
attachments' file types.
attachments' file types.
$filesizes
Replaced with a comma-separated list of the message’s
attachment’s file sizes.
attachment’s file sizes.
$remotehost
Replaced by the hostname of the system that sent the message to
the Cisco appliance.
the Cisco appliance.
$AllHeaders
Replaced by the message headers.
$EnvelopeFrom
Replaced by the Envelope Sender (Envelope From, <MAIL
FROM>) of the message.
FROM>) of the message.
$Hostname
Replaced by the hostname of the Cisco appliance.
$bodysize
Replaced by the size, in bytes, of the message.
$header[‘string’]
Replaced by the value of the quoted header, if the original
message contains a matching header. Note that double quotes
may also be used.
message contains a matching header. Note that double quotes
may also be used.
$remoteip
Replaced by the IP address of the system that sent the message to
the Cisco appliance.
the Cisco appliance.
$recvlistener
Replaced by the nickname of the listener that received the
message.
message.
$dropped_filenames
Same as
$filenames
, but displays list of dropped files.
$dropped_filename
Returns only the most recently dropped filename.
$recvint
Replaced by the nickname of the interface that received the
message.
message.
$timestamp
Replaced by the current time and date, as would be found in the
Received: line of an email message, in the local time zone.
Received: line of an email message, in the local time zone.
$Time
Replaced by the current time, in the local time zone.
$orgid
Replaced by the SenderBase Organization ID (an integer value).
$enveloperecipients
Replaced by all Envelope Recipients (Envelope To, <RCPT TO>)
of the message.
of the message.
$dropped_filetypes
Same as
$filetypes
, but displays list of dropped file types.
$dropped_filetype
Returns only the file type of the most recently dropped file.
Variable Substituted
With