How do I control body and attachment scanning in filters?

Available Languages

Updated:July 31, 2014

Document ID:118119

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Question:

Answer:

Question:

How do I control body and attachment scanning in filters?

Answer:

The scanconfig command controls the behavior of body and attachment scanning, including specifying the encodings to use when scanning attachments and which attachment types should be skipped when scanning.

The scanconfig command sets these parameters:

MIME types of video/*, audio/*, image/* or anything that appears to be a PDF file are skipped (not scanned for content).
Nested (recursive) archive attachments up to 50 levels are scanned. (The default is 5 levels.).
The maximum size for attachments to be scanned is 25 MB; anything larger will be skipped. (The default is 5 MB and Value must be an integer from 0 to 26214400)
Attachments that were not scanned are assumed to not match the search pattern. (This is the default behavior.)

Note - When setting the assume the attachment matches the search pattern to Y, messages that cannot be scanned will cause the message filter rule to evaluate to true. This could result in unexpected behavior, such as the quarantining of messages that do not match a dictionary, but were quarantined because their content could not be correctly scanned.

For more information about filters and the scanconfig command, see the AsyncOS Advanced User Guide :

Cisco Email Security Appliance End-User Guides