Cisco Cisco Email Security Appliance C170 Mode D'Emploi
9-67
Cisco AsyncOS 8.5 for Email User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Actions
The following example inserts a message tag into a message with “[Encrypt]” in the subject. You can
then create a DLP policy that will encrypt messages with this message tag before delivering them if
Cisco Email Encryption is available:
then create a DLP policy that will encrypt messages with this message tag before delivering them if
Cisco Email Encryption is available:
Add Log Entry Action
The
log-entry
action inserts customized text into the Text Mail logs at the
INFO
level. The text can
include action variables. You can use this action to insert useful text for debugging purposes and
information on why a message filter performed a certain action. The log entry also appears in message
tracking.
information on why a message filter performed a certain action. The log entry also appears in message
tracking.
The following example inserts a log entry explaining that message was bounced because it possibly
contained confidential company information:
contained confidential company information:
URL Category Actions
Use the categories of URLs in messages to modify the URLs or their behavior. For important details, see
in
No rule is needed with these actions.
In all URL Category actions:
•
msg_filter_name
: is the name of the message filter.
•
category-name
is the URL category. Separate multiple categories with commas. To obtain correct
category names, look at a URL Category condition or action in a Content Filter. For descriptions and
examples of the categories, see
examples of the categories, see
•
url_white_list
is the name of a defined URL list (via the
urllistconfig
command.)
•
unsigned-only
: Enter 0 or 1.
–
1 - Apply this action to unsigned messages only
Tag_Message:
if (subject == '^\\[Encrypt\\]')
{
tag-message('Encrypt-And-Deliver');
}
CompanyConfidential:
if (body-contains('Company Confidential'))
{
log-entry('Message may have contained confidential information.');
bounce();
}