Cisco Cisco Email Security Appliance C160 Mode D'Emploi
10-4
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 10 Mail Policies
Matching Users to a Mail Policy
For each user, the first matching policy wins. If a user does not match any specific policy, user will
automatically match the default policy of the table.
automatically match the default policy of the table.
If a match is made based on a sender address, all remaining recipients of a message will match that
policy. (This is because there can be only one sender per message.)
policy. (This is because there can be only one sender per message.)
Examples of Policy Matching
The following examples help show how the policy tables are matched in a top-down fashion.
Given the following Incoming Mail Email Security Policy table shown in
, incoming
messages will match different policies.
Example 1
A message from sender
bill@lawfirm.com
sent to recipient
jim@example.com
will match policy #2,
because the user description that matches the sender (
@lawfirm.com
) appears sooner in the table than the
user description that matches the recipient (
jim@
).
Example 2
Sender
joe@yahoo.com
sends an incoming message with three recipients:
john@example.com
,
jane@newdomain.com
, and
bill@example.com
:
•
The message for recipient
jane@newdomain.com
will receive the anti-spam, anti-virus, outbreak
filters, and content filters defined in policy #3.
•
The message for recipient
john@example.com
will receive the settings defined in policy #5.
•
Because the recipient
bill@example.com
does not match the engineering LDAP query, the message
will receive the settings defined by the default policy.
This example shows how messages with multiple recipients can incur message splintering. See
for more information.
Example 3
Sender
bill@lawfirm.com
sends a message to recipients
ann@example.com
and
larry@example.com
:
Table 10-1
Policy Matching Example
Order
Policy Name
Users
1
special_people
Recipient:
joe@example.com
Recipient:
ann@example.com
2
from_lawyers
Sender:
@lawfirm.com
3
acquired_domains
Recipient:
@newdomain.com
Recipient:
@anotherexample.com
4
engineering
Recipient:
PublicLDAP.ldapgroup: engineers
5
sales_team
Recipient:
jim@
Recipient:
john@
Recipient:
larry@
Default Policy
(all users)