Cisco Cisco Email Security Appliance C170 사용자 가이드

If you configure multi-layer anti-virus scanning, the Cisco IronPort appliance performs virus scanning 
with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless 
the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco IronPort appliance 
performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.

Enable virus scanning for a mail policy. 

Use the Security Services > Sophos/McAfee Anti-virus page or the 

antivirusconfig

 command to set 

global settings, and then use the Email Security Manager pages (GUI) or the 

antivirus

 subcommand of 

policyconfig

 to configure the settings for a specific mail policy. 

Open a standard text editor, then type the following character string as one line, with no spaces or line 
breaks:

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*