Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 652
Chapter 6      Email Security Manager
6-2
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Overview of User-Based Policies
User-based policies in Email Security Manager are designed to allow you to 
create the policies that satisfy the different and sometimes disparate security 
needs of all users within your organization.
For example, using this feature, you can quickly create policies to enforce the 
following conditions: 
Disable IronPort Anti-Spam scanning for all email to the Sales organization. 
Enable it for the Engineering organization with a moderate policy: tag the 
subject lines of suspected spam and legitimate marketing messages, and drop 
positively identified spam. For the Human Resources organization, enable 
anti-spam scanning with an aggressive policy: quarantine suspected spam 
messages, quarantine legitimate marketing messages, and drop positively 
identified spam. 
Drop dangerous executable attachments for all users except those in the 
System Administrator group. 
Scan and attempt to repair viruses in messages destined for the Engineering 
organization, but drop infected attachments for all messages sent to the 
address 
jobs@example.com
Scan all outgoing messages using RSA Email Data Loss Prevention (DLP) for 
possible confidential information. If a message matches, quarantine the 
message and send a blind-carbon copy to the Legal department. 
If an incoming message contains an MP3 attachment, quarantine the message 
and send a message to the intended recipient with instructions for calling the 
Network Operations Center to retrieve the message. Expire such messages 
after 10 days. 
Include a disclaimer to all outgoing mail from the Executive Staff with the 
company’s newest tag line, but include a different “forward-looking 
statements” disclaimer to all outgoing mail from the Public Relations 
organization.