ESA C170 - stop sending 'WARNING: VIRUS REMOVED' emails

[pulsepointtechops]

Hi, our ESA C170 IronPort device is removing viruses from incoming emails, which is good, but the original message is still going to the recipients with the WARNING:VIRUS REMOVED message in the subject.  Is there a way for the IronPort to not send these emails along when they get flagged as having a virus?  Thanks.

[Ken Stieers]

Yes.

In the GUI, under Mail Policies/Incoming Mail Polices you'll find how mail is treated.

Click on the blue text under "Anti-Virus".   Here you'll configure what sort of scan to do Scan or Scan and Repair.  (labled 1)

If you do repair, what to do if the virus is removed is configured under "Repaired Messages"

[Mathew Huynh]

Hello Pulsepointtechops,

As Ken has described.

After which you can also 'uncheck' the 'Drop infected attachments if virus is found' this will grey out the repaired option, and anytime an email has a virus, it is actioned by your last rule

Virus Infected Messages

Regards,

Matthew