IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 8 Anti-Virus
OL-25136-01
Figure 8-2 Options for Handling Messages Scanned for Viruses
� Modify message subject
Internet mail
� Add custom header to message
Note By default, Anti-Virus scanning is enabled in the $TRUSTED mail flow policy for public listeners,
which is referenced by the WHITELIST sender group. See Mail Flow Policies: Access Rules and
Parameters, page 5-8.
Editing the Anti-Virus Settings for a Mail Policy
SMTP
Firewall
IronPort Email Security appliance
with Anti-Virus scanning enabled
� Scanned – virus found
and repaired
� Scanned – virus found,
� Scanned – virus found but
unable to clean
� Could not scan: unscannable
� Scanned –
no virus
found
attachment dropped � Could not scan: encrypted
The message is “known clean.” The message could be infected.
Deliver message, and optionally:
� Archive original message
� Send notification to sender,
recipient, and/or others
� Send custom notification to
recipient
Drop message, deliver message,
deliver message as an attachment
to a new message, or quarantine
message, and optionally:
� Modify message subject
� Add custom header to message
� Modify message recipient
� Modify destination host
� Archive original message
� Send notification to sender,
recipient, and/or others
� Send custom notification to
recipient
The process for editing the per-user anti-virus settings for a mail policy is essentially the same for
incoming or outgoing mail.
Individual policies (not the default) have an additional field to “Use Default” settings. Select this setting
to inherit the default mail policy settings.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Deliver
message.
8-13