User Guide

9-47
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
<msg_filter_name>: if url-category ([‘<category-name1>’,’<category-name2>’,…,
‘<category-name3>’],’<url_white_list>’)
{
<action>
}
Where:
• msg_filter_name is the name of this message filter.
• action is any Message Filter action.
• category-name is the URL category. Separate multiple categories with commas. To obtain correct
category names, look at a URL Category condition or action in a Content Filter. For descriptions and
examples of the categories, see About URL Categories, page 15-13.
• url_white_list is the name of a defined URL list (via the urllistconfig command.)
Corrupt Attachment Rule
The Corrupt Attachment rule evaluates to true if a message contains corrupt attachment. A corrupt
attachment is an attachment that the scanning engine cannot scan and identified as corrupt.
Related Topics
• Example, page 9-47
Example
In the following example, if the filter detects a corrupt attachment in a message, the message is
quarantined to Policy Quarantine.
quar_corrupt_attach: if (attachment-corrupt) { quarantine("Policy"); }