Cisco Cisco Email Security Appliance C160 Mode D'Emploi

You can specify a particular file type (“exe” files for example) or common groups of attachments in the 

attachment-filetype

 and 

drop-attachments-by-filetype rules

. AsyncOS divides the attachments 

into the groups listed in 

If you create a message filter that uses the

 !=

 operator to match a message that does not contain an 

attachment with a specific file type, the filter will not perform any action on the message if there is at 
least one attachment with the file type you want to filter out. For example, the following filter drops any 
message with an attachment that is not an 

 file type:

add-footer(footer-nam

e)

Add a footer to the message. See “Message Disclaimer 
Stamping” in the “Text Resources” chapter in the Cisco 
IronPort AsyncOS for Email Configuration Guide for 
more information. 

encrypt-deferred

Encrypt message on delivery, which means that the 
message continues to the next stage of processing, and 
when all processing is complete, the message is encrypted 
and delivered.

tag-message(tag-name)

Add a custom term into the message to use with RSA 
Email DLP policy filtering. You can configure a RSA 
Email DLP policy to limit scanning to messages with the 
message tag. The message tag is not visible to recipients. 
See 

 and the “Data 

Loss Prevention” chapter in the Cisco IronPort AsyncOS 
for Email Configuration Guide.

log-entry

Adds customized text into the IronPort Text Mail logs at 
the 

INFO

 level. The text can include action variables. The 

log entry appears in message tracking. See 

skip-filters

Ensure that this message is not processed by any other 
message filters and continues through the email pipeline. 
See 

drop

Drop and discard the message. See 

.

bounce

Send the message back to the sender. See 

.

encrypt

Use Cisco IronPort Email Encryption to encrypt outgoing 
messages. See 

exe_check: if (attachment-filetype != "exe") {

                   drop();

               }