IronPort - advanced configuration guide

Action Variables
6-48
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 6 Using Message Filters to Enforce Email Policies
The bcc(), bcc-scan(), notify(), notify-copy(), add-footer(), and insert-headers() actions have
parameters that may use certain variables that will be automatically replaced with information from the
original message when the action is executed. These special variables are called action variables. Your
Cisco IronPort appliance supports the following set of action variables:
Table 6-7 Message Filter Action Variables
Variable Syntax Description
All Headers $AllHeaders Returns the message headers.
Body Size $BodySize Returns the size, in bytes, of the message.
Certificate Signers $CertificateSigners Returns the signers from the
subjectAltName element of a signing
certificate. See $CertificateSigners Action
Variable, page 6-40 for more information.
Date $Date Returns the current date, using the format
MM/DD/YYYY.
Dropped File Name $dropped_filename Returns only the most recently dropped
filename.
Dropped File Names $dropped_filenames Displays list of dropped files (similar to
$filenames.
Dropped File Types $dropped_filetypes Displays list of dropped file types (similar to
$filetypes).
Envelope Sender $EnvelopeFrom Returns the Envelope Sender (Envelope
From, ) of the message.
Envelope Recipients $EnvelopeRecipients Returns all Envelope Recipients (Envelope
To, ) of the message.
File Names $filenames Returns a comma-separated list of the
message’s attachments’ filenames.
File Sizes $filesizes Returns a comma-separated list of the
message’s attachments file sizes.
File Types $filetypes Returns a comma-separated list of the
message's attachments' file types.
Filter Name $FilterName Returns the name of the filter being
processed.
GMTimeStamp $GMTimeStamp Returns the current time and date, as would
be found in the Received: line of an email
message, using GMT.
HAT Group Name $Group Returns the name of the sender group the
sender matched on when injecting the
message. If the sender group had no name,
the string “>Unknown