IronPort - Configuration Guide - AsyncOS 7.6.1

6-16
Table 6-4 Content Filter Actions (Continued)
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 6 Email Security Manager
Action Description
Add/Edit Header Inserts a new header into the message or modifies an existing header.
Header name. Name of new or existing header.
Specify value of new header. Inserts a value for the new header into the
message before delivering.
Prepend to the Value of Existing Header. Prepends the value to the existing
header before delivering.
Append to the Value of Existing Header. Appends the value to the existing
header before delivering.
Search & Replace from the Value of Existing Header. Enter a search term
to find the value you want to replace in the existing header in the Search for
field. Enter the value you want to insert into the header in the Replace with
field. You can use a regular expression to search for the value. Leave the
Replace with field empty if you want to delete the value from the header.
Add Message Tag Inserts a custom term into the message to use with RSA Email DLP policy
filtering. You can configure a RSA Email DLP policy to limit scanning to
messages with the message tag. The message tag is not visible to recipients.
For information on using messages tags in a DLP policy, see DLP Policies,
page 11-10.
Add Log Entry Inserts customized text into the IronPort Text Mail logs at the INFO level. The
text can include action variables. The log entry also appears in message
tracking.
Encrypt and Deliver Now
(Final Action)
Encrypts and delivers the message, skipping any further processing.
Encryption rule: Always encrypts the message or only encrypts it if an
attempt to send it over a TLS connection first fails. See Using a TLS
Connection as an Alternative to Encryption, page 12-8 for more information.
Encryption Profile. Encrypts the message using the specified encryption
profile, then delivers the message. This action is for use with a Cisco
IronPort Encryption Appliance or a hosted key service.
Subject. Subject for the encrypted message. By default, the value is
$Subject.
Bounce (Final Action) Sends the message back to the sender.
Skip Remaining Content
Filters (Final Action)
Delivers the message to the next stage of processing, skipping any further
content filters. Depending on configuration, this may mean deliver the
message to recipient(s), quarantine, or begin Outbreak Filters scanning.
Drop (Final Action) Drops and discards the message.
OL-25136-01