Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Any message with multiple states causes a multi-part notification message 
informing users what actions the appliance performed on the message (for 
example, the user is notified that the message was repaired of a virus, but another 
part of the message was encrypted).

You can archive messages the system has identified as containing (or possibly 
containing) viruses to the “avarchive” directory. The format is an mbox-format 
log file. You must configure an “Anti-Virus Archive” log subscription to archive 
messages with viruses or messages that could not be completely scanned. For 
more information, refer to “Logging” in the Cisco IronPort AsyncOS for Email 
Daily Management Guide for more information. 

In the GUI, you may need to click the “Advanced” link to reveal the “Archive 
original message” setting. 

When the system has identified a message as containing viruses, you can send the 
default notification to the sender, the recipient, and/or additional users. When 
specifying additional users to notify, separate multiple addresses with commas (in 
both the CLI and the GUI). The default notification messages are:

Repaired

The following virus(es) was detected in a mail message: <virus 
name(s)> 

Actions taken: Infected attachment dropped (or Infected 
attachment repaired).

Encrypted

The following message could not be fully scanned by the 
anti-virus engine due to encryption.