Cisco Cisco Email Security Appliance C160 Mode D'Emploi
41-9
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 41 Centralizing Services on a Cisco Content Security Management Appliance
About Centralizing Policy, Virus, and Outbreak Quarantines
•
System-created quarantines and quarantines that are referenced by message filters, content filters,
and DLP message actions are automatically created on the Email Security appliance. The Virus,
Outbreak, and Unclassified quarantines are created with the same settings that they had before
quarantines were centralized, including assigned user roles. All other quarantines are created with
default settings.
and DLP message actions are automatically created on the Email Security appliance. The Virus,
Outbreak, and Unclassified quarantines are created with the same settings that they had before
quarantines were centralized, including assigned user roles. All other quarantines are created with
default settings.
•
Newly quarantined messages go immediately to local quarantines.
•
Messages in the centralized quarantine at the time it is disabled remain there until one of the
following occurs:
following occurs:
–
Messages are manually deleted or automatically deleted when they expire.
–
Messages are manually or automatically released, if one of the following is also true:
* An alternate release appliance is configured on the Security Management appliance. See the
online help or documentation for the Security Management appliance.
online help or documentation for the Security Management appliance.
* Centralized quarantines are again enabled on the Email Security appliance.
Disabling Centralized Policy, Virus, and Outbreak Quarantines
Before You Begin
•
Understand the impacts of disabling centralized policy, virus, and outbreak quarantines.
•
Do one of the following:
–
Process all messages that are currently in centralized policy, virus, and outbreak quarantines.
–
Ensure that you have designated an alternate release appliance to process messages that are
released from the centralized quarantine after you disable it. For information, see the online
help or user guide for your Security Management appliance.
released from the centralized quarantine after you disable it. For information, see the online
help or user guide for your Security Management appliance.
Procedure
Step 1
On the Email Security appliance, choose Security Services > Centralized Services > Policy, Virus,
and Outbreak Quarantines.
and Outbreak Quarantines.
Step 2
Disable centralized policy, virus, and outbreak quarantines.
Step 3
Submit and commit the change.
Step 4
Customize the settings of the newly created local quarantines.
Troubleshooting Centralized Policy, Virus, and Outbreak Quarantines
If a Cisco Content Security Management Appliance Goes Out of Service
If Policy, Virus, and Outbreak Quarantines are centralized on a Security Management appliance that goes
out of service, you should disable these centralized quarantines on the Email Security appliance.
out of service, you should disable these centralized quarantines on the Email Security appliance.
If you deploy a replacement Security Management appliance, you must reconfigure quarantine migration
on the Security Management appliance and on each Email Security appliance. See the table in the
“Centralizing Policy Virus, and Outbreak Quarantines” section in the “Centralized Policy, Virus, and
Outbreak Quarantines” chapter in the online help or user guide for the Security Management appliance.
on the Security Management appliance and on each Email Security appliance. See the table in the
“Centralizing Policy Virus, and Outbreak Quarantines” section in the “Centralized Policy, Virus, and
Outbreak Quarantines” chapter in the online help or user guide for the Security Management appliance.