IronPort - Configuration Guide - AsyncOS 7.6.1

OL-25136-01
Anti-Spam
CHAPTER
9
The Cisco IronPort appliance offers a unique, layered approach to stopping spam at the email gateway.
The first layer of spam control, reputation filtering (discussed previously in Chapter 7, “Reputation
Filtering”) allows you to classify email senders and restrict access to your email infrastructure based on
senders’ trustworthiness as determined by the Cisco IronPort SenderBase Reputation Service. The
second layer of defense, scanning, is powered by Cisco IronPort Anti-Spam and Cisco IronPort
Intelligent Multi-Scan technology. Coupled together, reputation filtering and anti-spam scanning offer
the most effective and highest performing anti-spam solution available today.
Using the Cisco IronPort appliance, it is very easy to create policies to deliver messages from known or
highly reputable senders — such as customers and partners — directly to the end user without any
anti-spam scanning. Messages from unknown or less reputable senders can be subjected to anti-spam
scanning, and you can also throttle the number of messages you are willing to accept from each sender.
Email senders with the worst reputation can have their connections rejected or their messages dropped
based on your preferences.
The unique, two-layer approach to fighting spam of the Cisco IronPort appliance provides you with a
powerful and unprecedented flexibility to manage and protect your enterprise email gateway.
Anti-Spam Overview, page 9-1
Cisco IronPort Anti-Spam Filtering, page 9-4
Cisco IronPort Intelligent Multi-Scan Filtering, page 9-9
Configuring Anti-Spam Rule Updating, page 9-11
Configuring Per-Recipient Policies for Anti-Spam, page 9-12
Incoming Relays, page 9-19
Anti-Spam Overview
Your Cisco IronPort appliance offers two anti-spam solutions: the Cisco IronPort Anti-Spam engine and
Cisco IronPort Intelligent Multi-Scan. You can license and enable these solutions on your Cisco IronPort
appliance, but you cannot enable both for the same policy. Using the Email Security Manager, you can
quickly and easily specify a different anti-spam solution for different groups of users.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
9-1