Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1197
 
9-79
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Attachment Scanning
Note
You can view the details of the Content Scanner-related files using the Security Services > Scan 
Behavior
 page in web interface or using the 
contentscannerstatus
 command in CLI. These files are 
automatically updated using update server. If you want to manually update these files, see 
.
Related Topics
Message Filters for Scanning Attachments
The message filter actions described in 
 are non-final actions. (Attachments are dropped and 
the message processing continues.)
The optional comment is text that is added to the message, much like a footer, and it can contain Message 
Filter Action Variables (see 
).
Table 9-8
Message Filter Actions for Attachment Filtering 
Action
Syntax Description 
Drop Attachments 
by Name
drop-attachments-by-name 
(<regular expression>[, 
<optional comment>]) 
Drops all attachments on messages that have a 
filename that matches the given regular 
expression. Archive file attachments (zip, tar) 
will be dropped if they contain a file that 
matches. See 
.
Drop Attachments 
by Type
drop-attachments-by-type 
(<MIME type>[, <optional 
comment
>]) 
Drops all attachments on messages that have a 
MIME type, determined by either the given 
MIME type or the file extension. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. 
Drop Attachments 
by File Type 
drop-attachments-by-filetype 
(<fingerprint name>[,  
<optional comment>])
Drops all attachments on messages that match 
the given “fingerprint” of the file. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. For more 
information, see 
Drop Attachments 
by MIME Type 
drop-attachments-by-mimetype 
(<MIME type>[,  <optional 
comment
>]) 
Drops all attachments on messages that have a 
given MIME type. This action does not attempt 
to ascertain the MIME type by file extension 
and so it also does not examine the contents of 
archives.