Cisco Cisco Email Security Appliance C160 Mode D'Emploi
4-9
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 4 Understanding the Email Pipeline
Work Queue / Routing
Anti-Virus
Your Cisco appliance includes integrated virus scanning engines. You can configure the appliance to
scan messages and attachments for viruses on a per-“mail policy” basis. You can configure the appliance
to do the following when a virus is found:
scan messages and attachments for viruses on a per-“mail policy” basis. You can configure the appliance
to do the following when a virus is found:
•
attempt to repair the attachment
•
drop the attachment
•
modify the subject header
•
add an additional X- header
•
send the message to a different address or mailhost
•
archive the message
•
delete the message
Messages released from quarantines (see
) are scanned for viruses. See
for more information about Anti-Virus scanning.
Content Filters
You can create content filters to be applied to messages on a per-recipient or per-sender basis. Content
filters are similar to message filters, except that they are applied later in the email pipeline — after a
message has been “splintered” into a number of separate messages for each matching Email Security
Manager policy. The functionality of content filters is applied after message filters processing and
anti-spam and anti-virus scanning have been performed on a message.
filters are similar to message filters, except that they are applied later in the email pipeline — after a
message has been “splintered” into a number of separate messages for each matching Email Security
Manager policy. The functionality of content filters is applied after message filters processing and
anti-spam and anti-virus scanning have been performed on a message.
For more information about Content Filters, see
.
Outbreak Filters
Cisco’s Outbreak Filters feature includes special filters that act proactively to provide a critical first layer
of defense against new outbreaks. Based on Outbreak Rules published by Cisco, messages with
attachments of specific filetypes can be sent to a quarantine named Outbreak.
of defense against new outbreaks. Based on Outbreak Rules published by Cisco, messages with
attachments of specific filetypes can be sent to a quarantine named Outbreak.
Messages in the Outbreak quarantine are processed like any other message in a quarantine. For more
information about quarantines and the Work Queue, see
information about quarantines and the Work Queue, see
.
See
for more information.
Quarantines
Cisco AsyncOS allows you to filter incoming or outgoing messages and place them into quarantines.
Quarantines are special queues or repositories used to hold and process messages. Messages in
quarantines can be delivered or deleted, based on how you configure the quarantine.
Quarantines are special queues or repositories used to hold and process messages. Messages in
quarantines can be delivered or deleted, based on how you configure the quarantine.
The following Work Queue features can send messages to quarantines:
•
Message Filters
•
Anti-Virus
•
Outbreak Filters
•
Content Filters