Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
17-15
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 17 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
Manually Processing Messages in the File Analysis Quarantine
Step 1
Select Monitor > Policy, Virus, and Outbreak Quarantines.
Step 2
In the row for File Analysis quarantine, click the blue number in the Messages column of the table.
Step 3
Depending on your requirements, perform the following actions on messages:
•
Delete
•
Release
•
Delay Scheduled Exit from quarantine
•
Send a copy of messages to email addresses that you specify
Centralized File Analysis Quarantine
For information about the centralized File Analysis quarantine, see
X-Headers for File Reputation and Analysis
You can use X-Headers to mark messages with actions and results of message processing steps. You tag
messages with X-Headers in mail policies, then use content filters to choose handling options and final
actions for these messages.
messages with X-Headers in mail policies, then use content filters to choose handling options and final
actions for these messages.
Values are case-sensitive.
Header Name
Possible Values
(Case Sensitive)
(Case Sensitive)
Description
X-Amp-Result Clean
SKIPPED(no attachment
in message)
in message)
Malicious
Unscannable
Verdict applied to messages processed by the
file reputation service.
file reputation service.
X-Amp-Original-Verdict
file unknown
verdict unknown
Verdict before adjustment based on reputation
threshold. This header exists only if the
original verdict is one of the possible values.
threshold. This header exists only if the
original verdict is one of the possible values.
X-Amp-File-Uploaded
true
false
If any file attached to a message was sent for
analysis, this header is "true."
analysis, this header is "true."