Cisco Cisco Email Security Appliance C160 Mode D'Emploi
12-11
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 12 Anti-Virus
How to Configure the Appliance to Scan for Viruses
Note
White space is not ignored in the “Modify message subject” field. Add spaces after (if prepending) or
before (if appending) the text you enter in this field to separate your added text from the original subject
of the message. For example, add the text
before (if appending) the text you enter in this field to separate your added text from the original subject
of the message. For example, add the text
[WARNING: VIRUS REMOVED]
with a few trailing spaces if you
are prepending.
The default text is:
Any message with multiple states causes a multi-part notification message informing users what actions
the appliance performed on the message (for example, the user is notified that the message was repaired
of a virus, but another part of the message was encrypted).
the appliance performed on the message (for example, the user is notified that the message was repaired
of a virus, but another part of the message was encrypted).
Sending Notifications
When the system has identified a message as containing viruses, you can send the default notification to
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
the sender, the recipient, and/or additional users. When specifying additional users to notify, separate
multiple addresses with commas (in both the CLI and the GUI). The default notification messages are:
Add Custom Header to Message
You can define an additional, custom header to be added to all messages that are scanned by the
anti-virus scanning engine. Click Yes and define the header name and text.
anti-virus scanning engine. Click Yes and define the header name and text.
You can also create filters that use the
skip-viruscheck
action so that certain messages bypass virus
scanning. See
Modify Message Recipient
You can modify the message recipient, causing the message to be delivered to a different address. Click
Yes and enter the new recipient address.
Yes and enter the new recipient address.
Table 12-2
Default Subject Line Text for Anti-Virus Subject Line Modification
Verdict
Default Text to Add to Subject
Encrypted
[WARNING: MESSAGE ENCRYPTED]
Infected
[WARNING: VIRUS DETECTED]
Repaired
[WARNING: VIRUS REMOVED]
Unscannable
[WARNING: A/V UNSCANNABLE]
Table 12-3
Default Notifications for Anti-Virus Notifications
Verdict
Notification
Repaired
The following virus(es) was detected in a mail message: <virus name(s)>
Actions taken: Infected attachment dropped (or Infected attachment repaired).
Encrypted
The following message could not be fully scanned by the anti-virus engine due to
encryption.
encryption.
Unscannable
The following message could not be fully scanned by the anti-virus engine.
Infectious
The following unrepairable virus(es) was detected in a mail message: <virus
name(s)>.
name(s)>.