Cisco Cisco Email Security Appliance C170 사용자 가이드

다운로드
페이지 1140
 
9-68
Cisco AsyncOS 8.5.5 for Email Security User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Message Filter Actions
0 - Apply this action to all messages 
Replace URL with Text, Based on URL Category 
The syntax of a filter using the 
url-category-replace
 action is 
<msg_filter_name>:
if <condition> 
{
url-category-replace([‘<category-name1>’,’<category-name2>’,…, 
‘<category-name3>’],’<replacement-text>’, ’<url_white_list>’, <unsigned-only>);
}
Where 
replacement-text
 is the text that you want to use to replace the URL. 
Defang URL, Based on URL Category 
The syntax of a filter using the 
url-category-defang 
action is: 
<msg_filter_name>:
if <condition>
{
url-category-defang([‘<category-name1>’,’<category-name2>’,…, ‘<category-name3>’], 
’<url_white_list>’, <unsigned-only>);
}
Redirect URL to Cisco Security Proxy, Based on URL Category 
The syntax of a filter using the 
url-category-proxy-redirect 
action is: 
<msg_filter_name>:
if <condition>
{
url-category-proxy-redirect([‘<category-name1>’,’<category-name2>’,…, 
‘<category-name3>’], ’<url_white_list>’, <unsigned-only>);
}
No Operation
The No Operation action performs a no-op, or no operation. You can use this action in a message filter 
if you do not want to use any of the other actions such as Notify, Quarantine, or Drop. For example, to 
understand the behavior of a new message filter that you created, you can use the No Operation action. 
After the message filter is operational, you can monitor the behavior of the new message filter using the 
Message Filters report page, and fine-tune the filter to match your requirements.
The following example shows how to use No Operation action in a message filter.
new_filter_test: if header-repeats ('subject', X, 'incoming') {no-op();}