Руководство Пользователя для Cisco Cisco Email Security Appliance C170

The Work Queue is where the received message is processed before moving to the 
delivery phase. Processing includes masquerading, routing, filtering, 
safelist/blocklist scanning, anti-spam and anti-virus scanning, Outbreak Filters, 
and quarantining.

Data loss prevention (DLP) scanning is only available for outgoing messages. For 
information on where DLP message scanning occurs in the Work Queue, see 

.

 It is recommended that you enable and avoid changing security services 

on Cloud Email Security appliances.

Note, as a general rule, changes to security services (anti-spam scanning, 
anti-virus scanning, and Outbreak Filters) do not affect messages already in the 
work queue. As an example:

If a message bypasses anti-virus scanning when it first enters the pipeline because 
of any of these reasons:

anti-virus scanning was not enabled globally for the appliance, or

the HAT policy was to skip anti-virus scanning, or

there was a message filter that caused the message to bypass anti-virus 
scanning,

then the message will not be anti-virus scanned upon release from the quarantine, 
regardless of whether anti-virus scanning has been re-enabled. However, 
messages that bypass anti-virus scanning due to mail policies may be anti-virus 
scanned upon release from a quarantine, as the mail policy's settings may have 
changed while the message was in the quarantine. For example, if a message 
bypasses anti-virus scanning due to a mail policy and is quarantined, then, prior 
to release from the quarantine, the mail policy is updated to include anti-virus 
scanning, the message will be anti-virus scanned upon release from the 
quarantine.