Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1219
 
31-8
Cisco AsyncOS 9.1 for Email User Guide
 
Chapter 31      Spam Quarantine
  Using Safelists and Blocklists to Control Email Delivery Based on Sender
blocklist action is configured to quarantine, the message is scanned and eventually quarantined. If the 
blocklist action is configured to delete, the message is dropped immediately after safelist/blocklist 
scanning. 
Because safelists and blocklists are maintained in the spam quarantine, delivery behavior is also 
contingent on other anti-spam settings. For example, if you configure the “Accept” mail flow policy in 
the Host Access Table (HAT) to skip anti-spam scanning, then users who receive mail on that listener 
will not have their safelist and blocklist settings applied to mail received on that listener. Similarly, if 
you create a mail flow policy that skips anti-spam scanning for certain message recipients, these 
recipients will not have their safelist and blocklist settings applied. 
Related Topics
Enabling Safelists and Blocklists 
Before You Begin 
The spam quarantine must be enabled. See 
Procedure 
Step 1
Select Monitor > Spam Quarantine
Step 2
In the End-User Safelist/Blocklist (Spam Quarantine) section, select Enable
Step 3
Select Enable End User Safelist/Blocklist Feature.
Step 4
Select Quarantine or Delete for the Blocklist Action.
Step 5
Specify the Maximum List Items Per User
This is the maximum number of addresses or domains for each list, for each recipient. If you allow a 
large number of list entries per user, system performance might be adversely affected. 
Step 6
Submit and commit your changes. 
External Spam Quarantine and Safelist/Blocklists 
If you use an external spam quarantine on a Security Management appliance, the safelist/blocklist is 
saved on the management appliance. This gives you a single location to manage safe and blocked senders 
for all appliances. 
Because the Email Security appliance evaluates senders in safelists and blocklists when processing 
incoming mail, safelists and blocklists that are stored on a Security Management appliance must be sent 
to the Email Security appliance in order to be applied to incoming mail. When you configure the 
safelist/blocklist feature on a Security Management appliance, you configure the frequency of these 
updates. 
For more information about working with external safelists and blocklists on a Security Management 
appliance, see the topics under 
Cisco Content Security Management Appliance User Guide.