IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 6 Email Security Manager
OL-25136-01
Table 6-5 Action Variables (Continued)
Variable Syntax Description
Time $Time Replaced by the current time, in the local
time zone.
Timestamp $Timestamp Replaced by the current time and date, as
would be found in the Received: line of an
email message, in the local time zone.
Practical Example (GUI)
The following example demonstrates the features of Email Security Manager by illustrating the
following tasks:
Step 1 Editing the anti-spam, anti-virus, Outbreak Filter, and Content Filters for the default Incoming Mail
Policy.
Step 2 Adding two new policies for different sets of users — the sales organization and the engineering
organization — and then configuring different email security settings for each.
Step 3 Creating three new content filters to be used in the Incoming Mail Overview policy table.
Step 4 Editing the policies again to enable the content filters for some groups, but not for others.
This example is meant to show the power and flexibility with which you can manage different
recipient-based settings for anti-spam, anti-virus, Outbreak Filter, and Content Filters in Email Security
Manager. This example assigns these a custom user role called “Policy Administrator” that has mail
policy and content filters access privileges. For more detailed information about how anti-spam,
anti-virus, Outbreak filters, and delegated administration work, refer to the chapters following this one:
Anti-Spam, page 9-1
Anti-Virus, page 8-1
Outbreak Filters, page 10-1
Common Administrative Tasks, Cisco IronPort AsyncOS for Email Daily Management Guide
Accessing Email Security Manager
On newly-installed or upgraded systems, access Email Security Manager by clicking the Mail Policies
tab. By default, The Incoming Mail Policies table is displayed.
On brand new systems, if you completed all steps in the system setup wizard and you chose to enable
Cisco IronPort Anti-Spam, Sophos or McAfee Anti-Virus, and Outbreak Filters, the Incoming Mail
Policies Page will resemble Figure 6-4.
By default, these settings are enabled for the default Incoming Mail Policy:
Anti-Spam (if the Cisco IronPort Spam Quarantine is enabled): Enabled
– Positively-identified spam: quarantine, prepend the message subject
– Suspected spam: quarantine, prepend the message subject
– Marketing email: scanning not enabled
Anti-Spam (if the Cisco IronPort Spam Quarantine is not enabled): Enabled
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
6-19