Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario
C H A P T E R
7-1
AsyncOS 8.1 for Cisco Content Security Management User Guide
7
Managing the Cisco IronPort Spam Quarantine
•
•
•
•
•
•
Understanding the Cisco IronPort Spam Quarantine
A Cisco IronPort Spam Quarantine holds spam and suspected spam messages for email users in your
organization. The spam quarantine provides a safeguard mechanism for organizations that are concerned
about “false positives” — that is, legitimate email messages that are quarantined or deleted as spam. This
feature allows end users and administrators to review messages that are flagged as spam before making
a final determination. In addition, if you enable the safelist/blocklist feature, end users (email users) can
exercise control over which messages are marked as spam.
organization. The spam quarantine provides a safeguard mechanism for organizations that are concerned
about “false positives” — that is, legitimate email messages that are quarantined or deleted as spam. This
feature allows end users and administrators to review messages that are flagged as spam before making
a final determination. In addition, if you enable the safelist/blocklist feature, end users (email users) can
exercise control over which messages are marked as spam.
Note
Policy, virus, and outbreak quarantines are distinct from the spam quarantine. For more information, see
the documentation for your Email Security appliance and
the documentation for your Email Security appliance and
A local Cisco IronPort Spam Quarantine resides on an Email Security gateway appliance. You can also
have messages sent to an external Cisco IronPort Spam Quarantine, which resides on a separate content
security appliance — typically a Cisco Content Security Management appliance.
have messages sent to an external Cisco IronPort Spam Quarantine, which resides on a separate content
security appliance — typically a Cisco Content Security Management appliance.
Note
You can implement end user access to the Cisco IronPort Spam Quarantine only for specified users or
groups of users. Also, after you initially implement end user access, you might later decide to disable
access if end users rarely view and release messages in the quarantine.
groups of users. Also, after you initially implement end user access, you might later decide to disable
access if end users rarely view and release messages in the quarantine.
You can configure AsyncOS to send a notification email to end users, informing them of quarantined
spam and suspected spam messages. The notification contains a summary of the messages currently in
the Cisco IronPort Spam Quarantine for that user. The user can view the messages and decide whether
to have them delivered to the Email Inbox or delete them. Users can also search through their quarantined
messages. Users can access the quarantine through the notification message, or they can access the
spam and suspected spam messages. The notification contains a summary of the messages currently in
the Cisco IronPort Spam Quarantine for that user. The user can view the messages and decide whether
to have them delivered to the Email Inbox or delete them. Users can also search through their quarantined
messages. Users can access the quarantine through the notification message, or they can access the