Cisco Cisco Email Security Appliance C690 User Guide
4-25
Cisco IronPort AsyncOS 7.5 for Email Daily Management Guide
OL-25138-01
Chapter 4 Quarantines
Working with Messages in System Quarantines
The Outbreak quarantine has some additional features, not available in other
quarantines: the Manage by Rule Summary link, the Send to IronPort feature
when viewing message details, and the option to sort messages in sort results by
Scheduled Exit time.
quarantines: the Manage by Rule Summary link, the Send to IronPort feature
when viewing message details, and the option to sort messages in sort results by
Scheduled Exit time.
If anti-spam and anti-virus are enabled on the appliance, the scanning engines
scan every message released from the Outbreak quarantine based on the mail flow
policy that applies to the message.
scan every message released from the Outbreak quarantine based on the mail flow
policy that applies to the message.
Manage Rule by Summary Link
Click the Manage by Rule Summary link next to the Outbreak quarantine in the
quarantine listing to view the Manage by Rule Summary page. You can perform
message actions (Release, Delete, Delay Exit) on all of the messages in the
quarantine based on which outbreak rule caused the message to be quarantined.
This is ideal for clearing out large amounts of messages from the Outbreak
quarantine. For more information, see the “Outbreak Filters” chapter in the Cisco
IronPort AsyncOS for Email Configuration Guide.
quarantine listing to view the Manage by Rule Summary page. You can perform
message actions (Release, Delete, Delay Exit) on all of the messages in the
quarantine based on which outbreak rule caused the message to be quarantined.
This is ideal for clearing out large amounts of messages from the Outbreak
quarantine. For more information, see the “Outbreak Filters” chapter in the Cisco
IronPort AsyncOS for Email Configuration Guide.
Send to IronPort
When viewing message details for a message in the Outbreak quarantine, you can
optionally report the message to Cisco IronPort. Do this to report false positives
or to report suspicious messages to Cisco IronPort.
optionally report the message to Cisco IronPort. Do this to report false positives
or to report suspicious messages to Cisco IronPort.
To send a copy of a message to Cisco IronPort:
Step 1
On the Message Details page, mark the Send a Copy to IronPort Systems box:
Figure 4-12
Searching Quarantines
Step 2
Click Send. A copy of the message is sent to IronPort Systems.