Cisco Cisco Email Security Appliance C160 Mode D'Emploi

IronPort’s Virus Outbreak Filters feature provides you with a “head start” when 
battling virus outbreaks. Historically, as new viruses or variants hit the Internet, 
the most critical time period is the window of time between when the virus is 
released and when the anti-virus vendors release an updated virus definition. 
Having advanced notice — even a few hours — is vital to curbing the spread of 
malicious code. During that vulnerability window, a modern virus can propagate 
globally, bringing email infrastructure to a halt.

IronPort’s Virus Outbreak Filters act proactively to provide a critical first layer of 
defense against new outbreaks. By detecting new outbreaks in real-time and 
dynamically responding to prevent suspicious traffic from entering the network, 
IronPort’s Virus Outbreak Filters offer protection until new anti-virus signature 
updates are deployed. Integrated into IronPort’s email security appliances, the 
Virus Outbreak Filters have two principal components: the outbreak detection 
technology and the intelligent quarantine system implemented in the IronPort 
appliances.

IronPort’s industry leading Virus Outbreak Filters technology provides “fire and 
forget” functionality, requiring no administrator interaction once enabled. The 
technology uses two different rule sets to provide the highest efficacy and the 
most focused set of criteria for virus detection to ensure that filters can be laser 
focused on a particular threat. The Virus Outbreak Filters rules and actions are 
visible to the administrator, not hidden away behind the scenes, providing instant 
access to the messages that were quarantined, and the reason why they were 
quarantined.

Your IronPort appliance ships with a 30-day evaluation license for the Virus 
Outbreak Filters feature.

This chapter contains the following sections: