Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1181
 
9-80
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Attachment Scanning
Note
You can view the details of the Content Scanner-related files using the Security Services > Scan 
Behavior
 page in web interface or using the 
contentscannerstatus
 command in CLI. These files are 
automatically updated using update server. If you want to manually update these files, see 
Related Topics
Message Filters for Scanning Attachments
The message filter actions described in 
 are non-final actions. (Attachments are dropped and 
the message processing continues.)
The optional comment is text that is added to the message, much like a footer, and it can contain Message 
Filter Action Variables (see 
).
Table 9-8
Message Filter Actions for Attachment Filtering 
Action
Syntax Description 
Drop Attachments 
by Name
drop-attachments-by-name 
(<regular expression>[, 
<optional comment>]) 
Drops all attachments on messages that have a 
filename that matches the given regular 
expression. Archive file attachments (zip, tar) 
will be dropped if they contain a file that 
matches. See 
.
Drop Attachments 
by Type
drop-attachments-by-type 
(<MIME type>[, <optional 
comment
>]) 
Drops all attachments on messages that have a 
MIME type, determined by either the given 
MIME type or the file extension. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. 
Drop Attachments 
by File Type 
drop-attachments-by-filetype 
(<fingerprint name>[,  
<optional comment>])
Drops all attachments on messages that match 
the given “fingerprint” of the file. Archive file 
attachments (zip, tar) will be dropped if they 
contain a file that matches. For more 
information, see 
.
Drop Attachments 
by MIME Type 
drop-attachments-by-mimetype 
(<MIME type>[,  <optional 
comment
>]) 
Drops all attachments on messages that have a 
given MIME type. This action does not attempt 
to ascertain the MIME type by file extension 
and so it also does not examine the contents of 
archives.