Cisco Cisco Email Security Appliance C650 Guía Del Usuario
29-4
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 29 Policy, Virus, and Outbreak Quarantines
Managing Policy, Virus, and Outbreak Quarantines
Retention Time for Messages in Quarantines
Messages are automatically removed from the quarantine under the following circumstances:
•
Normal Expiration—the retention time is met for a message in the quarantine. You specify a
retention time for messages in each quarantine. Each message has its own specific expiration time,
displayed in the quarantine listing. Messages are stored for the amount of time specified unless
another circumstance described in this topic occurs.
retention time for messages in each quarantine. Each message has its own specific expiration time,
displayed in the quarantine listing. Messages are stored for the amount of time specified unless
another circumstance described in this topic occurs.
Note
The normal retention time for messages in the Outbreak Filters quarantine is configured in
the Outbreak Filters section of each mail policy, not in the outbreak quarantine. For
information, see
the Outbreak Filters section of each mail policy, not in the outbreak quarantine. For
information, see
•
Early Expiration—messages are forced from quarantines before the configured retention time is
reached. This can happen when:
reached. This can happen when:
–
The size limit for all quarantines, as defined in
, is reached.
If the size limit is reached, the oldest messages, regardless of quarantine, are processed and the
default action is performed for each message, until the size of all quarantines is again less than
the size limit. The policy is First In First Out (FIFO). Messages in multiple quarantines will be
expired based on their latest expiration time.
default action is performed for each message, until the size of all quarantines is again less than
the size limit. The policy is First In First Out (FIFO). Messages in multiple quarantines will be
expired based on their latest expiration time.
(Optional) You can configure individual quarantines to be exempt from release or deletion
because of insufficient disk space. If you configure all quarantines to be exempt and the disk
space reaches capacity, messages in the quarantine will be delivered to make room for new
messages.
because of insufficient disk space. If you configure all quarantines to be exempt and the disk
space reaches capacity, messages in the quarantine will be delivered to make room for new
messages.
You will receive alerts at disk-space milestones. See
–
You delete a quarantine that still holds messages.
When a message is automatically removed from a quarantine, the default action is performed on that
message. See
message. See
.
Effects of Time Adjustments on Retention Time
•
Daylight savings time and appliance time zone changes do not affect the retention period.
•
If you change the retention time of a quarantine, only new messages will have the new expiration
time.
time.
•
If the system clock is changed, messages that should have expired in the past will expire at the next
most appropriate time.
most appropriate time.
•
System clock changes do not apply to messages that are in the process of being expired.
Default Actions for Automatically Processed Quarantined Messages
The default action is performed on messages in a policy, virus, or outbreak quarantine when any situation
described in
described in
There are two primary default actions:
•
Delete—The message is deleted.