Cisco Cisco Email Security Appliance C390 사용자 가이드

다운로드
페이지 418
Chapter 4      Quarantines
Configuring the IronPort Spam Quarantines Feature
4-114
Cisco IronPort AsyncOS 7.3 for Email Daily Management Guide
OL-23080-01
If the appliance has either the IronPort Anti-Spam or Intelligent Multi-Scan 
feature, the anti-spam scanning engine scans every message released from the 
Outbreak quarantine based on the mail flow policy that applies to the message.
Manage Rule by Summary Link
Click the Manage by Rule Summary link next to the Outbreak quarantine in the 
quarantine listing to view the Manage by Rule Summary page. You can perform 
message actions (Release, Delete, Delay Exit) on all of the messages in the 
quarantine based on which outbreak rule caused the message to be quarantined. 
This is ideal for clearing out large amounts of messages from the Outbreak 
quarantine. For more information, see the “Virus Outbreak Filters” chapter in the 
Cisco IronPort AsyncOS for Email Configuration Guide.
Send to IronPort
When viewing message details for a message in the Outbreak quarantine, you can 
optionally report the message to IronPort. Do this to report false positives or to 
report suspicious messages to IronPort.
To send a copy of a message to IronPort:
Step 1
On the Message Details page, mark the Send a Copy to IronPort Systems box:
Figure 4-12
Searching Quarantines
Step 2
Click Send. A copy of the message is sent to IronPort Systems.
Configuring the IronPort Spam Quarantines Feature
Each IronPort appliance can have a local IronPort Spam quarantine enabled if the 
IronPort anti-spam has been enabled. Each IronPort appliance can also refer to an 
external IronPort Spam quarantine, configured on another IronPort appliance