Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 460
 
8-11
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 8      Anti-Virus
For example, a content filter can cause a message to be dropped or bounced, in which case the message 
will not be quarantined.
Modify the Message Subject Header
You can alter the text of identified messages by prepending or appending certain text strings to help users 
more easily identify and sort identified messages. 
Note
White space is not ignored in the “Modify message subject” field. Add spaces after (if prepending) or 
before (if appending) the text you enter in this field to separate your added text from the original subject 
of the message. For example, add the text 
[WARNING: VIRUS REMOVED]
 with a few trailing spaces if you 
are prepending.
 The default text is:
Any message with multiple states causes a multi-part notification message informing users what actions 
the appliance performed on the message (for example, the user is notified that the message was repaired 
of a virus, but another part of the message was encrypted).
Archive Original Message
You can archive messages the system has identified as containing (or possibly containing) viruses to the 
“avarchive” directory. The format is an mbox-format log file. You must configure an “Anti-Virus 
Archive” log subscription to archive messages with viruses or messages that could not be completely 
scanned. For more information, refer to “Logging” in the Cisco IronPort AsyncOS for Email Daily 
Management Guide
 for more information. 
Note
In the GUI, you may need to click the “Advanced” link to reveal the “Archive original message” setting. 
Table 8-1
Default Subject Line Text for Anti-Virus Subject Line Modification
Verdict
Default Text to Add to Subject
Encrypted 
[WARNING: MESSAGE ENCRYPTED]
Infected
[WARNING: VIRUS DETECTED]
Repaired
[WARNING: VIRUS REMOVED]
Unscannable
[WARNING: A/V UNSCANNABLE]