Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario
8-11
AsyncOS 9.6 for Cisco Content Security Management Appliances User Guide
Chapter 8 Centralized Policy, Virus, and Outbreak Quarantines
Managing Policy, Virus, and Outbreak Quarantines
Default Actions for Automatically Processed Quarantined Messages
The default action is performed on messages in a policy, virus, or outbreak quarantine when any situation
described in
described in
, occurs.
There are two primary default actions:
•
Delete—The message is deleted.
•
Release—The message is released for delivery.
Upon release, messages may be rescanned for threats. For more information, see
.
In addition, messages released before their expected retention time has passed can have additional
operations performed on them, such as adding an X-Header. For more information, see
operations performed on them, such as adding an X-Header. For more information, see
.
Messages released from a centralized quarantine are returned to the originating Web Security
appliance for processing.
appliance for processing.
Checking the Settings of System-Created Quarantines
Before you use quarantines, customize the settings of the default quarantines, including the Unclassified
quarantine.
quarantine.
Related Topics
•
Configuring Policy, Virus, and Outbreak Quarantines
Before You Begin
•
If you are editing an existing quarantine, see
•
Understand how messages in quarantines are automatically managed, including retention times and
default actions. See
default actions. See
, and
•
Determine which users you want to have access to each quarantine, and create users and custom user
roles accordingly. For details, see
roles accordingly. For details, see
.
Procedure
Step 1
Choose Email > Message Quarantine > Policy, Virus, and Outbreak Quarantines.
Step 2
Do one of the following:
•
Click Add Policy Quarantine.
•
Click a quarantine to edit.
Step 3
Enter information.
Keep the following in mind: