Cisco Cisco Email Security Appliance C160 Références techniques

S C A N C O N F I G

C H A P T E R   3 :   T H E   C O M M A N D S :   R E F E R E N C E   E X A M P L E S

 213

Description

Configure attachment scanning policy

Usage

Commit: This command requires a ‘commit’.

Cluster Management: This command can be used in all three machine modes (cluster, group, 
machine).

Batch Command: This command supports a batch format.

Example

In this example, the 

scanconfig

 command sets these parameters: 

• MIME types of video/*, audio/*, image/* are skipped (not scanned for content). 

• Nested (recursive) archive attachments up to 10 levels are scanned. (The default is 5 

levels.) 

• The maximum size for attachments to be scanned is 25 megabytes; anything larger will be 

skipped. (The default is 5 megabytes.) 

• The document metadata is scannned. 

• Attachment scanning timeout is set at 180 seconds.

• Attachments that were not scanned are assumed to not match the search pattern. (This is 

the default behavior.)

• ASCII encoding is configured for use when none is specified for plain body text or 

anything with MIME type plain/text or plain/html.

Note — When setting the 

assume the attachment matches the search pattern

 to 

Y, messages that cannot be scanned will cause the message filter rule to evaluate to true. This 
could result in unexpected behavior, such as the quarantining of messages that do not match 
a dictionary, but were quarantined because their content could not be correctly scanned. This 
setting does not apply to RSA Email DLP scanning.

Code Example 3-129 

Scan Config

 - Configuring Scan Behavior

mail3.example.com> scanconfig

There are currently 5 attachment type mappings configured to be 

SKIPPED.

Choose the operation you want to perform:

- NEW - Add a new entry.

- DELETE - Remove an entry.

- SETUP - Configure scanning behavior.

- IMPORT - Load mappings from a file.

- EXPORT - Save mappings to a file.