Cisco Cisco Email Security Appliance C160 Mode D'Emploi

 

The Cisco appliance includes integrated virus scanning engines from third party companies Sophos and 
McAfee. You can obtain license keys for the Cisco appliance to scan messages for viruses using one or 
both of these virus scanning engines, and then configure your appliance to scan for viruses using either 
anti-virus scanning engine.

The McAfee and Sophos engines contain the program logic necessary to scan files at particular points, 
process and pattern-match virus definitions with data they find in your files, decrypt and run virus code 
in an emulated environment, apply heuristic techniques to recognize new viruses, and remove infectious 
code from legitimate files. 

You can configure the appliance to scan messages for viruses (based on the matching incoming or 
outgoing mail policy), and, if a virus is found, to perform different actions on the message (including 
“repairing” the message of viruses, modifying the subject header, adding an additional X-header, 
sending the message to an alternate address or mailhost, archiving the message, or deleting the message).

If enabled, virus scanning is performed in the “work queue” on the appliance, immediately after 
Anti-Spam scanning. (See 

By default, virus scanning is enabled for the default incoming and outgoing mail policies. 

Your Cisco appliance ships with a 30-day evaluation key for each available anti-virus scanning engine. 
You enable the evaluation key by accessing the license agreement in the System Setup Wizard or 
Security Services > Sophos/McAfee Anti-Virus pages (in the GUI) or running the 

antivirusconfig

 or 

systemsetup

 commands (in the CLI). Once you have accepted the agreement, the Anti-Virus scanning 

engine will be enabled, by default, for the default incoming and outgoing mail policies. For information