Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
9-86
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Attachment Scanning
Note
Cisco recommends you do not drop or bounce messages with inappropriate or suspect verdicts. Instead,
send copies of violations to a quarantine for later review and better understanding of trend analysis.
send copies of violations to a quarantine for later review and better understanding of trend analysis.
The following filter shows messages tagged if the content is inappropriate or suspect:
Related Topics
•
Creating Content Filters to Strip Attachments Based on Image Analysis Verdicts
After you enable image analysis, you can create a content filter to strip attachments based on image
analysis verdicts, or you can configure a filter to perform different actions for different message verdicts.
For example, you might decide to quarantine messages that contain inappropriate content.
analysis verdicts, or you can configure a filter to perform different actions for different message verdicts.
For example, you might decide to quarantine messages that contain inappropriate content.
To strip attachments based on image analysis verdicts:
Procedure
Step 1
Click Mail Policies > Incoming Content Filters.
Step 2
Click Add Filter.
Step 3
Enter a name for the content filter.
Step 4
Under Actions, click Add Action.
Step 5
Under Strip Attachment by File Info, click Image Analysis Verdict is:
Step 6
Select from the following image analysis verdicts:
•
Suspect
•
Inappropriate
•
Suspect or Inappropriate
•
Unscannable
image_analysis: if image-verdict == "inappropriate" {
strip-header("Subject");
insert-header("Subject", "[inappropriate image] $Subject");
}
else {
if image-verdict == "suspect" {
strip-header("Subject");
insert-header("Subject", "[suspect image] $Subject");
}
}