Руководство Пользователя для Cisco Cisco Email Security Appliance C170

Скачать
Страница из 460
 
3-36
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 3      Setup and Installation
Enable Anti-Virus Scanning
Your Cisco IronPort appliance ships with a 30-day evaluation key for virus scanning engines. During this 
portion of the 
systemsetup
 command, you can choose to accept one or more license agreements and 
enable anti-virus scanning on the appliance. You must accept a license agreement for each anti-virus 
scanning engine you want to enable on your appliance. 
After you accept the agreement, the anti-virus scanning engine you selected is enabled on the incoming 
mail policy. The Cisco IronPort appliance scans incoming mail for viruses, but it does not repair infected 
attachments. The appliance drops infected messages.
See 
 for the anti-virus configuration options available on the appliance. 
Enable Outbreak FiltersOutbreak Filters and SenderBase Email Traffic Monitoring Network
This next step prompts you to enable both SenderBase participation and Outbreak Filters. Your Cisco 
IronPort appliance ships with a 30-day evaluation key for Outbreak Filters.
Outbreak Filters
Outbreak Filters provide a “first line of defense” against new virus outbreaks by quarantining suspicious 
messages until traditional Anti-Virus security services can be updated with a new virus signature file. If 
enabled, Outbreak Filters will be enabled on the default Incoming Mail Policy. 
If you choose to enable Outbreak Filters, enter a threshold value and whether you would like to receive 
Outbreak Filters alerts. For more information about Outbreak Filters and threshold values, see 
.
SenderBase Participation
SenderBase is an email reputation service designed to help email administrators research senders, 
identify legitimate sources of email, and block spammers.
If you agree to participate in the SenderBase Email Traffic Monitoring Network, Cisco will collect 
aggregated statistics about email sent to your organization. This includes summary data on message 
attributes and information on how different types of messages were handled by Cisco IronPort 
appliances.
See 
 for more information.
Configure the Alert Settings and AutoSupport
Cisco IronPort AsyncOS sends alert messages to a user via email if there is a system error that requires 
the user’s intervention. Add at least one email address that receives system alerts. Separate multiple 
addresses with commas. The email addresses that you enter initially receive all types of alerts at all 
levels, except for Directory Harvest Attack Prevention alerts. You can add more granularity to the alert 
configuration later using the 
alertconfig
 command in the CLI or the System Administration > Alerts 
page in the GUI. For more information, see 
.
The Cisco IronPort AutoSupport feature keeps the Cisco IronPort Customer Support team aware of 
issues with your Cisco IronPort appliance so that Cisco can provide industry-leading support to you. 
Answer “Yes” to send Cisco support alerts and weekly status updates. (For more information, see