Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

To see the verdict score for a particular message, you can view the mail logs. The 
mail logs display the image name or file name, the score for a particular message 
attachment. In addition, the log displays information about whether the images in 
a file were scannable or unscannable. Note that information in the log describes 
the result for each message attachment, rather than each image. For example, if 
the message had a zip attachment that contained a JPEG image, the log entry 
would contain the name of the zip file rather than the name of the JPEG. Also, if 
the zip file included multiple images then the log entry would include the 
maximum score of all the images. The unscannable notation indicates whether 
any of the images were unscannable.

The log does not contain information about how the scores translate to a particular 
verdict (clean, suspect or inappropriate). However, because you can use mail logs 
to track the delivery of specific messages, you can determine by the actions 
performed on the messages whether the mail contained inappropriate or suspect 
images.

For example, the following mail log shows attachments dropped by message filter 
rules as a result of Image Analysis scanning:

Please enter minimum image size to scan in pixels, representing either 

height or width of a given image.

[100]>

Thu Apr  3 08:17:56 2009 Debug: MID 154 IronPort Image Analysis: image 

'Unscannable.jpg' is unscannable.

Thu Apr  3 08:17:56 2009 Info: MID 154 IronPort Image Analysis: 

attachment 'Unscannable.jpg' score 0 unscannable

Thu Apr  3 08:17:56 2009 Info: MID 6 rewritten to MID 7 by 

drop-attachments-where-image-verdict filter 'f-001'