Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 548
Chapter 5      Using Message Filters to Enforce Email Policies
5-374
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Image Analysis
Some messages contain images that you may wish to scan for inappropriate 
content. You can use the image analysis engine to search for inappropriate content 
in email. Image analysis is not designed to supplement or replace your anti-virus 
and anti-spam scanning engines. Its purpose is to enforce acceptable use by 
identifying inappropriate content in email. Use the image analysis scanning 
engine to quarantine and analyze mail and to detect trends. 
Drop 
Attachments 
by Size 
drop-attachments-by-siz
e (<number>[, <optional 
comment>]) 
Drops all attachments on the 
message that, in raw encoded form, 
are equal to or greater than the size 
(in bytes) given. Note that for 
archive or compressed files, this 
action does not examine the 
uncompressed size, but rather the 
size of the actual attachment itself.
Attachment 
Scanning
drop-attachments-where-
contains (<regular 
expression>[, <optional 
comment>]) 
Drops all attachments on message 
that contain the regular expression. 
Archive files (zip, tar) will be 
dropped if any of the files they 
contain match the regular expression 
pattern.
Drop 
Attachments 
by Dictionary 
Matches
drop-attachments-where-
dictionary-match(<dicti
onary name>)
This filter action strips attachments 
based on matches to dictionary 
terms. If the terms in the MIME parts 
considered to be an attachment 
match a dictionary term (and the 
user-defined threshold is met), the 
attachment is stripped from the 
email.  See 
Table 5-8
Message Filter Actions for Attachment Filtering  (Continued)
Action
Syntax Description