Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Headers added to messages processed by content filters can contain variables that will be automatically 
replaced with information from the original message when the action is executed. These special variables 
are called action variables. Your Cisco appliance supports the following set of action variables:

$AllHeaders

Replaced by the message headers.

$BodySize

Replaced by the size, in bytes, of the 
message.

$Date

Replaced by the current date, using the 
format MM/DD/YYYY.

$dropped_filename

Returns only the most recently dropped 
filename. 

$dropped_filenames

Same as 

$filenames

, but displays list of 

dropped files.

$dropped_filetypes

Same as 

$filetypes

, but displays list of 

dropped file types.

$envelopefrom

or

$envelopesender

Replaced by the Envelope Sender (Envelope 
From, <MAIL FROM>) of the message.

$EnvelopeRecipients

Replaced by all Envelope Recipients 
(Envelope To, <RCPT TO>) of the message. 

$filenames

Replaced with a comma-separated list of the 
message’s attachments’ filenames.

$filesizes

Replaced with a comma-separated list of the 
message’s attachment’s file sizes.

$filetypes

Replaced with a comma-separated list of the 
message's attachments' file types.

$FilterName

Replaced by the name of the filter being 
processed. 

$GMTimeStamp

Replaced by the current time and date, as 
would be found in the Received: line of an 
email message, using GMT.

$Group

Replaced by the name of the sender group 
the sender matched on when injecting the 
message. If the sender group had no name, 
the string “

>Unknown<

” is inserted.

$Policy

Replaced by the name of the HAT policy 
applied to the sender when injecting the 
message. If no predefined policy name was 
used, the string “

>Unknown<

” is inserted.