Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1093
 
9-71
Cisco AsyncOS 8.0.2 for Email User Guide
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Attachment Scanning
The following filter shows messages tagged if the content is inappropriate or suspect: 
Creating Content Filters to Strip Attachments Based on Image Analysis Verdicts 
After you enable image analysis, you can create a content filter to strip attachments based on image 
analysis verdicts, or you can configure a filter to perform different actions for different message verdicts. 
For example, you might decide to quarantine messages that contain inappropriate content. 
To strip attachments based on image analysis verdicts:
Procedure 
Step 1
Click Mail Policies > Incoming Content Filters.
Step 2
Click Add Filter.
Step 3
Enter a name for the content filter.
Step 4
Under Actions, click Add Action.
Step 5
Under Strip Attachment by File Info, click Image Analysis Verdict is:
Step 6
Select from the following image analysis verdicts:
  •
Suspect
  •
Inappropriate
  •
Suspect or Inappropriate
  •
Unscannable
  •
Clean
To configure an action based on image analysis verdicts:
image_analysis: if image-verdict == "inappropriate" {
strip-header("Subject");
insert-header("Subject", "[inappropriate image] $Subject");
}
 else {
if image-verdict == "suspect" {
strip-header("Subject");
insert-header("Subject", "[suspect image] $Subject");
}