Руководство Пользователя для Cisco Cisco Email Security Appliance C170

Скачать
Страница из 460
 
6-19
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 6      Email Security Manager
Practical Example (GUI) 
The following example demonstrates the features of Email Security Manager by illustrating the 
following tasks:
Step 1
Editing the anti-spam, anti-virus, Outbreak Filter, and Content Filters for the default Incoming Mail 
Policy.
Step 2
Adding two new policies for different sets of users — the sales organization and the engineering 
organization — and then configuring different email security settings for each. 
Step 3
Creating three new content filters to be used in the Incoming Mail Overview policy table. 
Step 4
Editing the policies again to enable the content filters for some groups, but not for others. 
This example is meant to show the power and flexibility with which you can manage different 
recipient-based settings for anti-spam, anti-virus, Outbreak Filter, and Content Filters in Email Security 
Manager. This example assigns these a custom user role called “Policy Administrator” that has mail 
policy and content filters access privileges. For more detailed information about how anti-spam, 
anti-virus, Outbreak filters, and delegated administration work, refer to the chapters following this one:
  •
 
  •
  •
  •
Common Administrative Tasks, Cisco IronPort AsyncOS for Email Daily Management Guide
Accessing Email Security Manager
On newly-installed or upgraded systems, access Email Security Manager by clicking the Mail Policies 
tab. By default, The Incoming Mail Policies table is displayed. 
On brand new systems, if you completed all steps in the system setup wizard and you chose to enable 
Cisco IronPort Anti-Spam, Sophos or McAfee Anti-Virus, and Outbreak Filters, the Incoming Mail 
Policies Page will resemble 
By default, these settings are enabled for the default Incoming Mail Policy: 
  •
Anti-Spam (if the Cisco IronPort Spam Quarantine is enabled): Enabled 
  –
Positively-identified spam: quarantine, prepend the message subject
  –
Suspected spam: quarantine, prepend the message subject
  –
Marketing email: scanning not enabled
  •
Anti-Spam (if the Cisco IronPort Spam Quarantine is not enabled): Enabled 
Time
$Time
Replaced by the current time, in the local 
time zone.
Timestamp
$Timestamp
Replaced by the current time and date, as 
would be found in the Received: line of an 
email message, in the local time zone.
Table 6-5
Action Variables (Continued)
Variable
Syntax
Description