Cisco Cisco Email Security Appliance C160 사용자 가이드
17-36
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 17 Data Loss Prevention
Message Actions
$Group
Replaced by the name of the sender group the sender matched on
when injecting the message. If the sender group had no name, the
string “>Unknown<” is inserted.
when injecting the message. If the sender group had no name, the
string “>Unknown<” is inserted.
$Reputation
Replaced by the SenderBase Reputation score of the sender. If
there is no reputation score, it is replaced with “None”.
there is no reputation score, it is replaced with “None”.
$filenames
Replaced with a comma-separated list of the message’s
attachments’ filenames.
attachments’ filenames.
$filetypes
Replaced with a comma-separated list of the message's
attachments' file types.
attachments' file types.
$filesizes
Replaced with a comma-separated list of the message’s
attachment’s file sizes.
attachment’s file sizes.
$remotehost
Replaced by the hostname of the system that sent the message to
the Cisco appliance.
the Cisco appliance.
$AllHeaders
Replaced by the message headers.
$EnvelopeFrom
Replaced by the Envelope Sender (Envelope From, <MAIL
FROM>) of the message.
FROM>) of the message.
$Hostname
Replaced by the hostname of the Cisco appliance.
$bodysize
Replaced by the size, in bytes, of the message.
$header[‘string’]
Replaced by the value of the quoted header, if the original
message contains a matching header. Note that double quotes
may also be used.
message contains a matching header. Note that double quotes
may also be used.
$remoteip
Replaced by the IP address of the system that sent the message to
the Cisco appliance.
the Cisco appliance.
$recvlistener
Replaced by the nickname of the listener that received the
message.
message.
$dropped_filenames
Same as
$filenames
, but displays list of dropped files.
$dropped_filename
Returns only the most recently dropped filename.
$recvint
Replaced by the nickname of the interface that received the
message.
message.
$timestamp
Replaced by the current time and date, as would be found in the
Received: line of an email message, in the local time zone.
Received: line of an email message, in the local time zone.
$Time
Replaced by the current time, in the local time zone.
$orgid
Replaced by the SenderBase Organization ID (an integer value).
$enveloperecipients
Replaced by all Envelope Recipients (Envelope To, <RCPT TO>)
of the message.
of the message.
$dropped_filetypes
Same as
$filetypes
, but displays list of dropped file types.
$dropped_filetype
Returns only the file type of the most recently dropped file.
Variable Substituted
With