Cisco Cisco Email Security Appliance C190 Guida Utente

Pagina di 1219
 
11-11
Cisco AsyncOS 9.1 for Email User Guide
 
Chapter 11      Content Filters
  How Content Filters Work
Strip Attachment by File 
Info
File name. Drops all attachments on messages that have a filename that 
match the given regular expression. Archive file attachments (zip, tar) will 
be dropped if they contain a file that matches.
File size. Drops all attachments on the message that, in raw encoded form, 
are equal to or greater than the size (in bytes) given. Note that for archive or 
compressed files, this action does not examine the uncompressed size, but 
rather the size of the actual attachment itself.
File type. Drops all attachments on messages that match the given 
“fingerprint” of the file. Archive file attachments (zip, tar) will be dropped 
if they contain a file that matches.
MIME type. Drops all attachments on messages that have a given MIME 
type. 
Image Analysis Verdict. Drops attachments for image attachments that 
match the image verdict specified. Valid image analysis verdicts include: 
Suspect, Inappropriate, Suspect or Inappropriate, Unscannable, or Clean
Replacement message. The optional comment serves as the means to 
modify the text used to replace the attachment that was dropped. Attachment 
footers simply append to the message.
URL Reputation  
Use "No Score" to specify an action for URLs for which a reputation cannot 
be determined. 
URL Category  
Add Disclaimer Text
Above. Add disclaimer above message (heading).
Below. Add disclaimer below message (footer). 
Note: You must have already created disclaimer text in order to use this 
content filter action. 
 for more information. 
Bypass Outbreak Filter 
Scanning
Bypass Outbreak Filter scanning for this message.
Table 11-2
Content Filter Actions  (continued)
Action
Description