Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
Chapter 5 Using Message Filters to Enforce Email Policies
5-380
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Using the Image Analysis Message Filter
Once you enable image analysis, you must create a message filter to perform
different actions for different message verdicts. For example, you may wish to
deliver messages with a clean verdict, but quarantine messages that are
determined to have inappropriate content.
different actions for different message verdicts. For example, you may wish to
deliver messages with a clean verdict, but quarantine messages that are
determined to have inappropriate content.
Note
IronPort recommends you do not drop or bounce messages with inappropriate or
suspect verdicts. Instead, send copies of violations to a quarantine for later review
and better understanding of trend analysis.
suspect verdicts. Instead, send copies of violations to a quarantine for later review
and better understanding of trend analysis.
The following filter shows messages tagged if the content is inappropriate or
suspect:
suspect:
image_analysis: if image-verdict == "inappropriate" {
strip-header("Subject");
insert-header("Subject", "[inappropriate image] $Subject");
}
else {
if image-verdict == "suspect" {
strip-header("Subject");
insert-header("Subject", "[suspect image] $Subject");
}
}
Thu Apr 3 08:17:56 2009 Info: Message finished MID 6 done