Cisco Cisco Email Security Appliance C160 Mode D'Emploi

In step 4, you configure anti-spam and anti-virus settings. The anti-spam options include SenderBase 
Reputation Filtering and selecting an anti-spam scanning engine. For anti-virus, you can enable 
Outbreak Filters and Sophos or McAfee anti-virus scanning.

The SenderBase Reputation Service can be used as a stand-alone anti-spam solution, but it is primarily 
designed to improve the effectiveness of a content-based anti-spam system such as Cisco IronPort 
Anti-Spam. 

The SenderBase Reputation Service (http://www.senderbase.org) provides an accurate, flexible way for 
users to reject or throttle suspected spam based on the connecting IP address of the remote host. The 
SenderBase Reputation Service returns a score based on the probability that a message from a given 
source is spam. The SenderBase Reputation Service is unique in that it provides a global view of email 
message volume and organizes the data in a way that makes it easy to identify and group related sources 
of email. Cisco strongly suggests that you enable SenderBase Reputation Filtering.

Once enabled, SenderBase Reputation Filtering is applied on the incoming (accepting) listener.

Your Cisco IronPort appliance may ship with a 30-day evaluation key for Cisco IronPort Anti-Spam 
software. During this portion of the System Setup Wizard, you can choose to enable Cisco IronPort 
Anti-Spam globally on the appliance. You can also elect to not enable the service.

If you choose to enable the anti-spam service, you can configure AsyncOS to send spam and suspected 
spam messages to the local Cisco IronPort Spam Quarantine. The Cisco IronPort Spam Quarantine 
serves as the end-user quarantine for the appliance. Only administrators can access the quarantine until 
end-user access is configured.

See 

 for all of the Cisco IronPort Anti-Spam configuration options available on 

the appliance. See “Quarantines” in the Cisco IronPort AsyncOS for Email Daily Management Guide for 
information about the Cisco IronPort Spam Quarantine.

Your Cisco IronPort appliance may ship with a 30-day evaluation key for the Sophos Anti-Virus or 
McAfee Anti-Virus scanning engines. During this portion of the System Setup Wizard, you can choose 
to enable an anti-virus scanning engine globally on the appliance. 

If you choose to enable an anti-virus scanning engine, it is enabled for both the default incoming and 
default outgoing mail policies. The Cisco IronPort appliance scans mail for viruses, but it does not repair 
infected attachments. The appliance drops infected messages.

See 

 for all of the anti-virus configuration options available on the appliance.

Your Cisco IronPort appliance may ship with a 30-day evaluation key for Outbreak Filters. Outbreak 
Filters provide a “first line of defense” against new virus outbreaks by quarantining suspicious messages 
until traditional anti-virus security services can be updated with a new virus signature file.

See 

 for more information.