KB Article #101813
Virus Policy Behavior
Summary:
This article explains how a Virus Manager Policy forwards a "Clean Copy."
Note: This Policy does not represent a default policy setting in EMF necessarily used by customers:
Detailed Information:
=================================
VIRUS INBOUND POLICY - Recipient
=================================
Catch messages where...
One or more viruses were detected [Part 1]
Take the following actions...
Append "VIRUS_STRIPPED" to the message subject [Part 2]
and Forward a Clean Copy of the message
if successful, Quarantine the infected message with the tag: "Virus: Inbound" [Part 3]
otherwise Quarantine the infected message with no tag
PART 1: This section performs the action of detecting Viruses within a message.
PART 2: This action taken here is for the Policy to strip or disable the virus found within a message. A clean version of the message is then created and forwarded to the RECIPIENTS with the words "VIRUS_STRIPPED" appended to the SUBJECT.
PART 3: This section of the Policy states what to do with the Infected message. In this case we are putting the Infected message into the Quarantine Queue.
(ALERT!!!: The ORIGINAL Quarantined message contains the actual Virus Infected message. Please be careful with handling this infected message in the Quarantine Queue)
The last portion of the Policy states what to do with a message when the Virus Engine cannot disinfect it. In this case, we do not forward any copies and just Quarantine the entire message.
(NOTE: This will happen if a new virus is found or the message and/or attachment(s) exhibit a Virus Type characteristic.)