Руководство Пользователя для Cisco Cisco Email Security Appliance C170
17-9
Cisco AsyncOS 9.5 for Email User Guide
Chapter 17 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
Procedure
Step 1
Select Mail Policies > Incoming Mail Policies.
Step 2
Click the link in the Advanced Malware Protection column of the mail policy to modify.
Step 3
Under Messages with File Analysis Pending section, select Quarantine from the Action Applied to
Message drop-down.
Message drop-down.
The quarantined messages are stored in the File Analysis quarantine. See
Step 4
(Optional) Under Messages with File Analysis Pending section, choose the following options:
•
Whether to archive the original message. Archived messages are stored as an mbox-format log file
in the
in the
amparchive
directory on the appliance. The preconfigured AMP Archive (
amparchive
) log
subscription is required.
•
Whether to warn the end user by modifying the message subject, for example, “
[WARNING:
ATTACHMENT(S) MAY CONTAIN MALWARE]
.”
•
Whether to add a custom header to provide granular controls to the administrator.
Step 5
Submit and commit your changes.
Related Topics
•
•
Using the File Analysis Quarantine
•
•
Edit File Analysis Quarantine Settings
Procedure
Step 1
Select Monitor > Policy, Virus, and Outbreak Quarantines.
Step 2
Click the File Analysis quarantine link.
Step 3
Specify the retention period.
Step 4
Specify the default action that AsyncOS must take after the retention period has passed.
Step 5
If you do not want messages in this quarantine to be processed before the end of the Retention Period
you specify, even when quarantine disk space is full, deselect Free up space by applying default action
on messages upon space overflow.
you specify, even when quarantine disk space is full, deselect Free up space by applying default action
on messages upon space overflow.
Step 6
If you select Release as the Default Action, optionally specify additional actions to apply to messages
that are released before their retention period has passed:
that are released before their retention period has passed: