Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

The default action is performed on messages in a policy, virus, or outbreak quarantine when any situation 
described in 

, occurs. 

There are two primary default actions:

Delete—The message is deleted.

Release—The message is released for delivery. 

Upon release, messages may be re-scanned for threats. For more information, see 

. 

In addition, messages released before their expected retention time has passed can have additional 
operations performed on them, such as adding an X-Header. For more information, see 

Messages released from a centralized quarantine are returned to the originating Email Security 
appliance for processing. 

Before you use quarantines, customize the settings of the default quarantines, including the Unclassified 
quarantine. 

Understand how messages in quarantines are automatically managed, including retention times and 
default actions. See 

, and 

Determine which users you want to have access to each quarantine, and create users and custom user 
roles accordingly. For details, see 

. 

Choose Email > Message Quarantine > Policy, Virus, and Outbreak Quarantines.

Click Add Policy Quarantine. 

Enter information. 

Keep the following in mind: 

You cannot rename a quarantine. 

If you do not want messages in this quarantine to be processed before the end of the Retention Period 
you specify, even when quarantine disk space is full, deselect Free up space by applying default 
action on messages upon space overflow.