IronPort - Configuration Guide - AsyncOS 7.6.1

14-20
Table 14-3 Anti-Virus Notification Variables (Continued)
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 14 Text Resources
Variable Substituted With
$MatchedContent Returns the content that triggered a scanning filter rule (including
filter rules such as body-contains and content dictionaries).
$DLPPolicy Replaced by the name of the email DLP policy violated.
$DLPSeverity Replaced by the severity of violation. Can be “Low,” “Medium,”
“High,” or “Critical.”
$DLPRiskFactor Replaced by the risk factor of the message’s sensitive material
(score 0 - 100).
$threat_category Replaced with the type of Outbreak Filters threat, such as
phishing, virus, scam, or malware.
$threat_type Replaced by a subcategory of the Outbreak Filters threat
category. For example, can be a charity scam, a financial phishing
attempt, a fake deal, etc.
$threat_description Replaced by a description of the Outbreak Filters threat.
$threat_level Replaced by the message’s threat level (score 0 - 5).
To use message filter action variables in disclaimers, create a message disclaimer (via the Text Resource
page in the GUI or the textconfig command), and reference the variable:
(running textconfig command)
Enter or paste the message disclaimer here. Enter '.' on a blank line to end.
This message processed at: $Timestamp
.
Message disclaimer "legal.disclaimervar" created.
Current Text Resources:
1. legal.disclaimer (Message Disclaimer)
2. legal.disclaimervar (Message Disclaimer)
Choose the operation you want to perform:
- NEW - Create a new text resource.
- IMPORT - Import a text resource from a file.
OL-25136-01