Cisco Cisco Email Security Appliance C190 Guia Do Utilizador

Página de 460
 
8-16
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 8      Anti-Virus
Figure 8-4
Anti-Virus Settings for a Mail Policy (not default) - 2 of 2
Notes on Anti-Virus Configurations
The drop attachments flag makes a considerable difference in how anti-virus scanning works. When the 
system is configured to “Drop infected attachments if a virus is found and it could not be repaired,” any 
viral or unscannable MIME parts are removed from messages. The output from Anti-Virus scanning, 
then, is almost always a clean message. The action defined for Unscannable Messages, as shown in the 
GUI pane, rarely takes place. 
In a “Scan for Viruses only” environment, these actions “clean” messages by dropping the bad message 
parts. Only if the RFC822 headers themselves are attacked or encounter some other problem would this 
result in the unscannable actions taking place. However, when Anti-Virus scanning is configured for 
“Scan for Viruses only” and “Drop infected attachments if a virus is found and it could not be repaired,” 
is not chosen, the unscannable actions are very likely to take place.