Cisco Cisco Email Security Appliance C160 Mode D'Emploi

If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the 
McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the 
McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the 
anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.

Enable virus scanning for a mail policy. 

Use the Security Services > Sophos/McAfee Anti-virus page or the 

antivirusconfig

 command to set 

global settings, and then use the Email Security Manager pages (GUI) or the 

antivirus

 subcommand of 

policyconfig

 to configure the settings for a specific mail policy.