Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Each user (sender or recipient) is evaluated for each mail policy defined the appropriate mail policy table 
in a top-down fashion. 

For each user, the first matching policy wins. If a user does not match any specific policy, user will 
automatically match the default policy of the table. 

If a match is made based on a sender address, all remaining recipients of a message will match that 
policy. (This is because there can be only one sender per message.) 

The following examples help show how the policy tables are matched in a top-down fashion.

Given the following Incoming Mail Email Security Policy table shown in 

, incoming 

messages will match different policies. 

A message from sender 

bill@lawfirm.com

 sent to recipient 

jim@example.com

 will match policy #2, 

because the user description matches the sender (

@lawfirm.com

) and the recipient (

ANY

). 

Sender 

joe@yahoo.com

 sends an incoming message with three recipients: 

john@example.com

, 

jane@newdomain.com

, and 

bill@example.com

: 

Sender

Recipient

1

special_people

ANY

joe@example.com

ann@example.com

2

from_lawyers

@lawfirm.com

ANY

3

acquired_domains

ANY

@newdomain.com

@anotherexample.com

4

engineering

ANY

PublicLDAP.ldapgroup: 

engineers

5

sales_team

ANY

jim@

john@

larry@

Default Policy

ANY

ANY