安全 : Cisco IronPort Email 安全设备

什么“消息扫描问题:大小限制超出的”平均值?

2016 年 10 月 24 日 - 机器翻译
其他版本: PDFpdf | 英语 (2015 年 8 月 22 日) | 反馈

简介

本文描述在思科电子邮件安全工具(ESA)的邮件日志找到的“大小限制超出的”错误消息。

贡献用卡尔・罗哲斯和罗伯特Sherwin, Cisco TAC工程师。

什么“消息扫描问题:大小限制超出的”平均值?

在邮件日志和消息跟踪回顾在ESA,您可能发现以下错误和需要确定什么问题是:

Tue Sep  9 13:37:35 2014 Warning: MID 15180223, Message Scanning Problem: Size
Limit Exceeded

扫描在ESA有在大消息的一全局限制。 如果消息太大,从许多扫瞄通常是豁免和发送到末端收件人。 

要更改从CLI的消息扫描限制,请使用scanconfig。您将需要做调整到“最大大小附件扫描”选项如突出显示。

注意: 切记越大扫描大小设置,使用更多设备开销和资源。

myesa.loca> scanconfig


There are currently 5 attachment type mappings configured to be SKIPPED.

Choose the operation you want to perform:
- NEW - Add a new entry.
- DELETE - Remove an entry.
- SETUP - Configure scanning behavior.
- IMPORT - Load mappings from a file.
- EXPORT - Save mappings to a file.
- PRINT - Display the list.
- CLEAR - Remove all entries.
- SMIME - Configure S/MIME unpacking.
[]> setup

1. Scan only attachments with MIME types or fingerprints in the list.
2. Skip attachments with MIME types or fingerprints in the list.
Choose one:
[2]>

Enter the maximum depth of attachment recursion to scan:
[5]>

Enter the maximum size of attachment to scan:
[5242880]>


Do you want to scan attachment metadata? [Y]>

Enter the attachment scanning timeout (in seconds):
[1]>

If a message has attachments that were not scanned for any reason (e.g. because
of size, depth limits, or scanning timeout), assume the attachment matches the
search pattern? [N]>

In case of a content or message filter error, should all filters be bypassed? [Y]>

If a message could not be deconstructed into its component parts in order to remove
specified attachments, the system should:
1. Deliver
2. Bounce
3. Drop
[1]>

Configure encoding to use when none is specified for plain body text or anything with
MIME type plain/text or plain/html.
1. US-ASCII
2. Unicode (UTF-8)
3. Unicode (UTF-16)
4. Western European/Latin-1 (ISO 8859-1)
5. Western European/Latin-1 (Windows CP1252)
6. Traditional Chinese (Big 5)
7. Simplified Chinese (GB 2312)
8. Simplified Chinese (HZ GB 2312)
9. Korean (ISO 2022-KR)
10. Korean (KS-C-5601/EUC-KR)
11. Japanese (Shift-JIS (X0123))
12. Japanese (ISO-2022-JP)
13. Japanese (EUC)
[1]

 如果做任何更改和调整对设置,请务必确认所有更改从主CLI提示符。

在许多情况下,您发现特定消息也许超出了扫描,但是处理并且传送如最初预计。您将需要研究和reivew您的原始MID的最终处理的邮件日志。

相关信息



Document ID: 118497