27.11.2012 Views

IronPort - Configuration Guide - AsyncOS 7.6.1

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Contents<br />

vi<br />

Adding New RAT Entries 5-54<br />

Deleting RAT Entries 5-55<br />

Modifying RAT Entries 5-55<br />

Changing the Order of RAT Entries 5-55<br />

Exporting RAT Entries 5-56<br />

Importing RAT Entries 5-56<br />

CHAPTER 6 Email Security Manager 6-1<br />

CHAPTER 7 Reputation Filtering 7-1<br />

CHAPTER 8 Anti-Virus 8-1<br />

Overview of User-Based Policies 6-1<br />

Incoming vs. Outgoing Messages 6-2<br />

Policy Matching 6-3<br />

Message Splintering 6-4<br />

Contents of Policies 6-6<br />

Content Filters Overview 6-6<br />

Practical Example (GUI) 6-19<br />

Accessing Email Security Manager 6-19<br />

Editing the Default Policy: Anti-Spam Settings 6-21<br />

Creating a New Policy 6-22<br />

Creating Custom Policies 6-25<br />

Finding Users in Policies of the Email Security Manager 6-28<br />

Creating New Content Filters 6-30<br />

Enabling and Applying Content Filters to Individual Policies 6-33<br />

Notes on Configuring Content Filters in the GUI 6-35<br />

Reputation Filtering 7-1<br />

Reputation Filtering: the Cisco <strong>IronPort</strong> SenderBase Reputation Service 7-2<br />

SenderBase Reputation Score (SBRS) 7-3<br />

Implementing SenderBase Reputation Filters 7-4<br />

Configuring Reputation Filtering 7-6<br />

Implementing Reputation Filtering in a Listener’s HAT 7-7<br />

Testing Reputation Filtering Using the SBRS 7-8<br />

Monitoring the Status of the SenderBase Reputation Service 7-10<br />

Anti-Virus Scanning 8-1<br />

Evaluation Key 8-1<br />

Multi-Layer Anti-Virus Scanning 8-2<br />

Sophos Anti-Virus Filtering 8-2<br />

Cisco <strong>IronPort</strong> <strong>AsyncOS</strong> 7.6 for Email <strong>Configuration</strong> <strong>Guide</strong><br />

OL-25136-01

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!