Cisco Cisco Email Security Appliance C160 Mode D'Emploi

 explains how anti-virus actions and options affect 

messages processed by the appliance. 

Drop-attachments: YES

Scanning: Scan and Repair 

Cleaned messages: [VIRUS REMOVED] and Deliver 

(Archive cleaned messages for a more cautious policy.) 

Unscannable messages: Send notification(s), 
quarantine, OR drop and archive. 

Encrypted messages: Mark and forward OR treat as 
unscannable

Viral messages: Archive and drop

Drop-attachments: NO 

Scanning: Scan-Only 

Cleaned messages: Deliver (this action won't normally 
be taken) 

Unscannable messages: Forward as attachment, 

alt-src-host

, or 

alt-rcpt-to

 actions. 

Encrypted messages: Treat as unscannable

Viral messages: Forward to quarantine or administrator.