Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

The spam quarantine (also known as ISQ, End-User Quarantine, and EUQ) provides a safeguard 
mechanism for organizations that are concerned about “false positives” — that is, legitimate email 
messages that the appliance has deemed to be spam. When the appliance determines that a message is 
spam or suspected spam, you may want to let the recipient or an administrator review the message before 
delivering or deleting it. The spam quarantine stores messages for this purpose. 

Administrative users of the Email Security appliance can view all messages in a spam quarantine. End 
users, usually the message recipients, can view their own quarantined messages in a slightly different 
web interface. 

The spam quarantine is separate from policy, virus, and outbreak quarantines. 

A local spam quarantine stores spam and suspect spam on the Email Security appliance. An external 
spam quarantine can store these messages on a separate Cisco Content Security Management appliance.

Consider using an external spam quarantine if: 

You want a centralized location to store and manage spam from multiple Email Security appliances. 

You want to store more spam than the Email Security appliance can hold. 

You want to regularly back up the spam quarantine and its messages.