Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1140
 
12-9
Cisco AsyncOS 8.5.5 for Email Security User Guide
 
Chapter 12      Anti-Virus
  How to Configure the Appliance to Scan for Viruses
Configuring the appliance to deliver the infected messages as an attachment to a new message allows the 
recipient to choose how to deal with the original, infected attachment. 
If you choose to deliver the message or deliver the message as an attachment to a new message, you can 
additionally: 
Modify message subject
Archive original message
Send generic notification
The following actions are available in the “Advanced” section of the GUI:
Add custom header to message
Modify message recipient
Send message to alternate destination host
Send custom alert notification (to recipient only)
Note
These actions are not mutually exclusive; you can combine some or all of them differently within 
different incoming or outgoing policies for different processing needs for groups of users. See the 
following sections and 
 for more information on 
defining various scanning policies using these options. 
Note
Repaired messages have only two advanced options: Add custom header and Send custom alert 
notification. All other message types have access to all of the advanced options.
Quarantines and Anti-Virus Scanning
When flagged for quarantine, the message continues through the rest of the email pipeline. When the 
message reaches the end of the pipeline, if the message has been flagged for one or more quarantines 
then it enters those queues. Note that if the message does not reach the end of the pipeline, it is not placed 
in a quarantine.
For example, a content filter can cause a message to be dropped or bounced, in which case the message 
will not be quarantined.
Modify the Message Subject Header
You can alter the text of identified messages by prepending or appending certain text strings to help users 
more easily identify and sort identified messages. 
Note
White space is not ignored in the “Modify message subject” field. Add spaces after (if prepending) or 
before (if appending) the text you enter in this field to separate your added text from the original subject 
of the message. For example, add the text 
[WARNING: VIRUS REMOVED]
 with a few trailing spaces if you 
are prepending.
 The default text is:
Table 12-2
Default Subject Line Text for Anti-Virus Subject Line Modification
Verdict
Default Text to Add to Subject
Encrypted 
[WARNING: MESSAGE ENCRYPTED]