Cisco Cisco Email Security Appliance C160 Mode D'Emploi
10-343
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Chapter 10 Virus Outbreak Filters
Virus Outbreak Filters Rules
Outbreak Rules are published by the IronPort Threat Operations Center and your
IronPort appliance checks for and downloads new outbreak rules every 5 minutes.
IronPort appliance checks for and downloads new outbreak rules every 5 minutes.
The Virus Outbreak Filter Status section of the Virus Outbreak Filters page shows
a list of the current outbreak rules, divided into two groups: Above Quarantine
Threshold and Below Quarantine Threshold:
a list of the current outbreak rules, divided into two groups: Above Quarantine
Threshold and Below Quarantine Threshold:
Figure 10-4
Virus Outbreak Filters Rules Listing
Managing Outbreak Filter Rules
Because the Outbreak Rules are automatically downloaded for you, there really is
no management needed on the part of the user.
no management needed on the part of the user.
However, if for some reason your IronPort appliance is not able to reach
SenderBase for new rules over a period of time, it is possible that your
locally-cached scores are no longer valid, i.e., if a known viral attachment type
now has an update in the anti-virus software and/or is no longer a threat. At this
time, you may wish to no longer quarantine messages with these characteristics.
SenderBase for new rules over a period of time, it is possible that your
locally-cached scores are no longer valid, i.e., if a known viral attachment type
now has an update in the anti-virus software and/or is no longer a threat. At this
time, you may wish to no longer quarantine messages with these characteristics.
You can clear the current outbreak rules by clicking Clear Current Rules (this is
identical to issuing the
identical to issuing the
vofflush
command via the CLI, see the Cisco IronPort
AsyncOS CLI Reference Guide).