Cisco Cisco Email Security Appliance C170 사용자 가이드

Message ID: Find messages by identifying the SMTP “Message-ID:” header or the IronPort 
message ID (MID). 

Attachment name: You can search for messages based on the attachment name in the Envelope 
information fields (envelope senders or envelope recipients). Messages that contain at least one 
attachment with the queried name will appear in the search results. 

Some attachments may not be tracked. For performance reasons, scanning of attachment names 
occurs only as part of other scanning operations, for example message or content filtering, DLP, or 
disclaimer stamping. Attachment names are available only for messages that pass through body 
scanning while the attachment is still attached. Some examples when an attachment name will not 
appear include (but are not limited to): 

if the system only uses content filters, and a message is dropped or its attachment is stripped by 
anti-spam or anti-virus filters

if message splintering policies strip the attachment from some messages before body scanning 
occurs. 

To enable local message tracking:

Click Services > Message Tracking.

The Message Tracking page is displayed.

In the Message Tracking section, click Enable Message Tracking Service.

If you are enabling message tracking for the first time after running the System Setup Wizard, review 
the end-user license agreement, and click Accept.

Optionally, select the check box to save information for rejected connections.

Submit and commit your changes.

In order to search for and display attachment names in Message Tracking and view attachment names in 
log files, you must configure and enable at least one body scanning process, such as a message filter or 
content filter. For more information, see the “Email Security Manager” chapter in the Cisco IronPort 
AsyncOS for Email Configuration Guide and corresponding sections in the Cisco IronPort AsyncOS for 
Email Advanced Configuration Guide. 

To disable the local message tracking service: