Cisco Cisco Email Security Appliance C160 Mode D'Emploi
8-12
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 8 Anti-Virus
Sending Notifications
When the system has identified a message as containing viruses, you can send the default notification to
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
Add Custom Header to Message
You can define an additional, custom header to be added to all messages that are scanned by the
anti-virus scanning engine. Click Yes and define the header name and text.
anti-virus scanning engine. Click Yes and define the header name and text.
You can also create filters that use the
skip-viruscheck
action so that certain messages bypass virus
scanning. See “Bypass Anti-Virus System Action” in the “Using Message Filters to Enforce Email
Policies” chapter of the Cisco IronPort AsyncOS for Email Advanced Configuration Guide for more
information.
Policies” chapter of the Cisco IronPort AsyncOS for Email Advanced Configuration Guide for more
information.
Modify message recipient
You can modify the message recipient, causing the message to be delivered to a different address. Click
Yes and enter the new recipient address.
Yes and enter the new recipient address.
Send message to alternate destination host
You can choose to send the notification to a different recipient or destination host for encrypted,
unscannable, or virus infected messages. Click Yes and enter an alternate address or host.
unscannable, or virus infected messages. Click Yes and enter an alternate address or host.
For example, you could route suspected messages to an administrator’s mailbox or a special mail server
for subsequent examination. In the case of a multi-recipient message, only a single copy is sent to the
alternative recipient.
for subsequent examination. In the case of a multi-recipient message, only a single copy is sent to the
alternative recipient.
Send custom alert notification (to recipient only)
You can send a custom notification to the recipient. To do so, you must first create the custom
notification prior to configuring the settings. See
notification prior to configuring the settings. See
information.
Table 8-2
Default Notifications for Anti-Virus Notifications
Verdict
Notification
Repaired
The following virus(es) was detected in a mail message: <virus name(s)>
Actions taken: Infected attachment dropped (or Infected attachment repaired).
Encrypted
The following message could not be fully scanned by the anti-virus engine due to
encryption.
encryption.
Unscannable
The following message could not be fully scanned by the anti-virus engine.
Infectious
The following unrepairable virus(es) was detected in a mail message: <virus
name(s)>.
name(s)>.