IronPort - advanced configuration guide

Configuring Scanning Values
6-68
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 6 Using Message Filters to Enforce Email Policies
You can fine-tune image scanning by configuring the sensitivity setting, which helps reduce the number
of false positives. For example, if you find that you are getting false positives, you can decrease the
sensitivity setting. Or, conversely, if you find that the image scanning is missing inappropriate content,
you may want to set the sensitivity higher. The sensitivity setting is a value between 0 (no sensitivity)
and 100 (highly sensitive). The default sensitivity setting of 65 is recommended.
To configure scanning values:
Step 1 Go to Security Services > IronPort Image Analysis.
Step 2 Click Edit Settings
The Edit IronPort Image Analysis Settings page opens:
Figure 6-4 Edit IronPort Image Analysis Settings
Step 3 Configure the settings for image analysis sensitivity. The default sensitivity setting of 65 is
recommended.
Step 4 Configure the settings for Clean, Suspect, and Inappropriate verdicts.
When you configure the value ranges, ensure that you do not overlap values and that you use whole
integers.
Step 5 Optionally, configure AsyncOS to bypass scanning images that do not meet a minimum size requirement
(recommended). By default, this setting is configured for 100 pixels. Scanning images that are smaller
than 100 pixels can sometimes result in false positives.
You can also enable image analysis settings from the CLI via the imageanalysisconfig command:
test.com> imageanalysisconfig
IronPort Image Analysis: Enabled
Image Analysis Sensitivity: 65
Verdict Ranges: Clean (0-49), Suspect(50-74), Inappropriate (75+)
OL-25137-01