IronPort - Configuration Guide - AsyncOS 7.6.1

Chapter 9 Anti-Spam
OL-25136-01
You enable Cisco IronPort Anti-Spam or Cisco IronPort Intelligent Multi-Scan actions on a per-recipient
basis using the Email Security Manager feature: the Mail Policies > Incoming or Outgoing Mail Policies
pages (GUI) or the policyconfig -> antispam command (CLI). After the anti-spam solution has been
enabled globally, you configure these actions separately for each mail policy you create. You can
configure different actions for different mail policies.You can only enable one anti-spam solution per
policy; you cannot enable both on the same policy.
Note To enable anti-spam scanning for outgoing mail, you also need to check the anti-spam settings of the
relevant host access table, especially for a private listener. For more information, see Mail Flow Policies:
Access Rules and Parameters, page 5-8.
Each row in the Email Security Manager represents a different policy. Each column represents a different
security service.
Figure 9-10 Mail Policies - Anti-Spam Engine
Editing the Anti-Spam Settings for a Mail Policy
The process for editing the per-user anti-spam settings for a mail policy is essentially the same, whether
the policy is for incoming or outgoing mail.
Individual policies (not the default) have an additional field to “Use Default” settings. Selecting this
causes the policy to adopt all of the Anti-Spam settings from the default mail policy.
See also Editing the Default Policy: Anti-Spam Settings, page 6-21 for more information.
Step 1 Click the link for the Anti-Spam security service in any row of the Email Security Manager incoming or
outgoing mail policy table.
The Anti-Spam settings page similar to the one shown in Figure 9-11 is displayed.
Click the link in the default row to edit the settings for the default policy. Figure 9-11 shows the settings
for a specific policy (not the default). Compare this screen with Figure 6-6 on page 6-22. Note how
individual policies have the “Use Default” option.
Step 2 Select the anti-spam solution you want to use for the policy.
You can click Disabled to disable anti-spam scanning altogether for the mail policy.
Step 3 Configure settings for positively identified spam, suspected spam, and unwanted marketing messages.
Figure 9-11 shows the Cisco IronPort Anti-Spam settings for the default mail policy about to be edited.
See Positively Identified versus Suspected Spam, page 9-16 and Notes on Configuring Settings for
Identified Messages, page 9-14.
Step 4 Submit and commit your changes.
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
9-13