Cisco Cisco Email Security Appliance C190 Mode D'Emploi

spf-status

What was the SPF verification status? This filter 
rule allows you to query for different SPF 
verification results. You can enter a different 
action for each valid SPF/SIDF return value. See 

spf-passed

Did the SPF/SIDF verification pass? This filter 
rule generalizes the SPF/SIDF results as a 
Boolean value. See 

image-verdict

What was the image scanning verdict? This filter 
rule allows you to query for different image 
analysis verdicts. See 

workqueue-count

Is the work queue count equal to, less than, or 
greater than the specified value? See 

.

body-contains(<regular 

expression>)

Does the message contain text or an attachment 
that matches a specified pattern? Does the 
pattern occur the minimum number of times you 
specified for the threshold value?

The engine scans delivery-status parts and 
associated attachments. 

See 

only-body-contains(<regular 

expression>)

Does the message body contain text that matches 
a specified pattern? Does the pattern occur the 
minimum number of times you specified for the 
threshold value? Attachments are not scanned. 
See 

.

encrypted

Is the message encrypted? See 

attachment-filename

Does the message contain an attachment with a 
filename that matches a specific pattern? See 

.