Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1140
 
9-67
Cisco AsyncOS 8.5.5 for Email Security User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
The following example inserts a message tag into a message with “[Encrypt]” in the subject. You can 
then create a DLP policy that will encrypt messages with this message tag before delivering them if 
Cisco Email Encryption is available:
Add Log Entry Action
The 
log-entry
 action inserts customized text into the Text Mail logs at the 
INFO
 level. The text can 
include action variables. You can use this action to insert useful text for debugging purposes and 
information on why a message filter performed a certain action. The log entry also appears in message 
tracking. 
The following example inserts a log entry explaining that message was bounced because it possibly 
contained confidential company information: 
 
URL Category Actions 
Use the categories of URLs in messages to modify the URLs or their behavior. For important details, see 
 in 
No rule is needed with these actions. 
In all URL Category actions: 
msg_filter_name
: is the name of the message filter.
category-name
 is the URL category. Separate multiple categories with commas. To obtain correct 
category names, look at a URL Category condition or action in a Content Filter. For descriptions and 
examples of the categories, see 
url_white_list
 is the name of a defined URL list (via the 
urllistconfig
 command.)
unsigned-only
: Enter 0 or 1. 
1 - Apply this action to unsigned messages only
Tag_Message:
   if (subject == '^\\[Encrypt\\]') 
   {
        tag-message('Encrypt-And-Deliver');
   }
CompanyConfidential:
   if (body-contains('Company Confidential')) 
   {
        log-entry('Message may have contained confidential information.');
        bounce();
   }