Changes in Message Notification email receiving from cisco IronPort

[moin farooqui]

Hi Guys,

Can anyone help me to change or modify the content which i receiving from Cisco Message Notification when user's email gets quarantined example is as below.

From: Mail Delivery System <IronPort@mx name >
Sent: day date time
To: recepient name<recepient ID>
Subject: Message Notification

Date: 11/03/23

Time: 13:13:53

Subject: mails subject line

Sender: bounce_690400456296041430407+a.17aa3326igj651c26f19_vw6@domain.com

Policy Name: DMARC_Fail_Quarantine

is possible to display reply to the header email id also in notification info

like as below

Date: date

Time: time

Subject: mails subject line

Sender: bounce_690400456296041430407+a.17aa3326igj651c26f19_vw6@domain.com

Policy Name: Policy name
reply to: user@company.com

[Udupi Krishna.]

I am assuming this is a notification template if yes, then u can use $header followed the by the string or name of the header.

For e.g. Reply To: $header['Reply-to']

User guide reference - https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_010110.html#con_1124788

$header[‘string ’]

Replaced by the value of the quoted header, if the original message contains a matching header. Note that double quotes may also be used.

[Ken Stieers]

Udupi

Can you file a documentation bug on that for 15.x? I couldn't find that syntax anywhere.

Ken

[Udupi Krishna.]

Is this what you were looking for - https://www.cisco.com/c/en/us/td/docs/security/esa/esa15-0/user_guide/b_ESA_Admin_Guide_15-0/b_ESA_Admin_Guide_12_1_chapter_01010.html#con_1146269

This was from 15.0 user guide.