Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1219
 
C-11
Cisco AsyncOS 9.1 for Email User Guide
 
Appendix C      Example of Mail Policies and Content Filters
  Overview of Incoming Mail Policies
Figure C-13
Finding Users in Policies
Click the name of the policy to jump to the Edit Policy page to edit the users for that policy. 
Note that the default policy will always be shown when you search for any user, because, by definition, 
if a sender or recipient does not match any other configured policies, it will always match the default 
policy. 
Managed Exceptions
Using the steps shown in the two examples above, you can begin to create and configure policies on a 
managed exception basis. In other words, after evaluating your organization’s needs you can configure 
policies so that the majority of messages will be handled by the default policy. You can then create 
additional “exception” policies for specific users or user groups, managing the differing policies as 
needed. In this manner, message splintering will be minimized and you are less likely to impact system 
performance from the processing of each splinter message in the work queue. 
You can define policies based on your organizations’ or users’ tolerance for spam, viruses, and policy 
enforcement. 
 outlines several example policies. “Aggressive” policies are 
designed to minimize the amount of spam and viruses that reach end-users mailboxes. “Conservative” 
policies are tailored to avoid false positives and prevent users from missing messages, regardless of 
policies. 
Table C-1
Aggressive and Conservative Mail Policy Settings 
Aggressive Settings
Conservative Settings
Anti-Spam
Positively identified spam: Drop
Suspected spam: Quarantine
Marketing mail: Deliver and 
prepend “
[Marketing]
” to the 
subject messages
Positively identified spam: Quarantine
Suspected spam: Deliver and prepend 
[Suspected Spam]
” to the subject of messages
Marketing mail: Disabled
Anti-Virus
Repaired messages: Deliver
Encrypted messages: Drop
Unscannable messages: Drop
Infectious messages: Drop 
Repaired messages: Deliver
Encrypted messages: Quarantine
Unscannable messages: Quarantine
Infectious messages: Drop 
Virus 
Filters
Enabled, no specific filename 
extensions or domains allowed to 
bypass
Enable message modification for 
all messages
Enabled with specific filename extensions or 
domains allowed to bypass
Enable message modification for unsigned 
messages