Cisco Cisco Email Security Appliance C190 Guida Utente
Chapter 9 Anti-Virus
9-14
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
encrypted data. It does not detect password protected ZIP files, or Microsoft Word
and Excel documents that include encrypted content. The virus scanning engine
considers any message or attachment that is password protected to be “encrypted.”
and Excel documents that include encrypted content. The virus scanning engine
considers any message or attachment that is password protected to be “encrypted.”
Note
If you upgrade from a 3.8 or earlier version of AsyncOS and you configured
Sophos Anti-Virus scanning, you must configure the Encrypted Message
Handling section after you upgrade.
Sophos Anti-Virus scanning, you must configure the Encrypted Message
Handling section after you upgrade.
Unscannable Message Handling
Messages are considered unscannable if a scanning timeout value has been
reached, or the engine becomes unavailable due to an internal error. Messages that
are marked unscannable may also be repaired.
reached, or the engine becomes unavailable due to an internal error. Messages that
are marked unscannable may also be repaired.
Virus Infected Message Handling
The system may be unable to drop the attachment or completely repair a message.
In these cases, you can configure how the system handles messages that could still
contain viruses.
In these cases, you can configure how the system handles messages that could still
contain viruses.
The configuration options are the same for encrypted messages, unscannable
messages, and virus messages.
messages, and virus messages.
Configuring Settings for Message Handling Actions
Action to Apply
Choose which overall action to take on each message type for encrypted,
unscannable, or virus positive messages: drop the message, deliver the message
as an attachment to a new message, deliver the message as is, or send the message
to the anti-virus quarantine area (
unscannable, or virus positive messages: drop the message, deliver the message
as an attachment to a new message, deliver the message as is, or send the message
to the anti-virus quarantine area (
). See the “Quarantines” chapter in Cisco IronPort AsyncOS for Email
Daily Management Guide for more information about quarantines.
Configuring the appliance to deliver the infected messages as an attachment to a
new message allows the recipient to choose how to deal with the original, infected
attachment.
new message allows the recipient to choose how to deal with the original, infected
attachment.