Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Click the link in the Advanced Malware Protection column of the mail policy to modify.

Under Messages with File Analysis Pending section, select Quarantine from the Action Applied to 
Message drop-down.

The quarantined messages are stored in the File Analysis quarantine. See 

.

(Optional) Under Messages with File Analysis Pending section, choose the following options:

Whether to archive the original message. Archived messages are stored as an mbox-format log file 
in the 

amparchive

 directory on the appliance. The preconfigured AMP Archive (

amparchive

) log 

subscription is required.

Whether to warn the end user by modifying the message subject, for example, “

[WARNING: 

ATTACHMENT(S) MAY CONTAIN MALWARE]

.”

Whether to add a custom header to provide granular controls to the administrator.

Submit and commit your changes. 

Select Monitor > Policy, Virus, and Outbreak Quarantines.

Click the File Analysis quarantine link.

Specify the retention period.

Changing the default from one hour is not recommended. 

Specify the default action that AsyncOS must take after the retention period has passed.

If you do not want messages in this quarantine to be processed before the end of the Retention Period 
you specify, even when quarantine disk space is full, deselect Free up space by applying default action 
on messages upon space overflow. 

If you select Release as the Default Action, optionally specify additional actions to apply to messages 
that are released before their retention period has passed: