Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

A. The filters command executed from the CLI is used to configure the message filters.

B. Message filters configuration within the web user interface is located within Incoming Content Filters.

C. The filterconfig command executed from the CLI is used to configure message filters.

D. Message filters can be configured only from the CLI.

E. Message filters can be configured only from the web user interface.

View Answer

Answer: AD

Explanation:

Message filters can only be applied to the ESA via command line. So, you will need command line access to the ESA.

Log into the ESA via command line.

Run the following highlighted commands to apply the message filter to the ESA:

ironport.example.com> filters

Choose the operation you want to perform:

– NEW – Create a new filter.

– IMPORT – Import a filter script from a file. []> NEW

Enter filter script. Enter ‘.’ on its own line to end.

large_spam_no_attachment:

if ((body-size > 2097152) AND NOT (attachment-size > 0)) { quarantine("large_spam");

log-entry("*****This is a large message with no attachments*****");

}.

1 filters added.

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using-a-message-filter-to-take-act.html