Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1212
 
9-117
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 9      Using Message Filters to Enforce Email Policies
  Configuring Scan Behavior
Configuring Scan Behavior
You can control the behavior of body and attachment scanning, such as the attachment types to be 
skipped during a scan by configuring the scanning parameters. Use the Scan Behavior page or the 
scanconfig
 command to configure these parameters. Scan behavior settings are global settings, meaning 
that they affect the behavior of all the scans.
Note
If you want to scan a MIME type that may be included in a zip or compressed file, you must include list 
'compressed' or 'zip' or 'application/zip' in the scan list.
Procedure 
Step 1
Click Security Services > Scan Behavior.
Step 2
Define the attachment type mapping. Do one of the following:
Add a new attachment type mapping. Click Add Mapping.
Import a list of attachment type mappings using a configuration file. Click Import List, and import 
the desired configuration file from the configuration directory.
Note
To perform this step, the configuration file must be present in the configuration directory of 
your appliance. See 
.
Click Edit to modify an existing attachment type mapping.
Step 3
Configure the global settings. Do the following:
a.
Under Global Settings, click Edit Global Settings.
b.
Edit the desired fields:
Table 9-11
Field
Description
Action for attachments with MIME 
types / fingerprints in table above
Choose whether to scan or skip attachments types 
defined in the attachment type mapping. 
Maximum depth of attachment 
recursion to scan
Specify the level up to which the recursive 
attachments are to be scanned. 
Maximum attachment size to scan
Specify the maximum size of attachments to scan.
Attachment Metadata scan
Specify whether to scan or skip metadata of the 
attachments.
Attachment scanning timeout
Specify the scanning time-out period. 
Assume attachment matches 
pattern if not scanned for any 
reason
Specify whether to consider unscanned 
attachments as match to the search pattern.
Action when message cannot be 
deconstructed to remove specified 
attachments
Specify the action to be taken when a message 
could not be deconstructed to remove specified 
attachments.