Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 446
 
8-24
AsyncOS 10.0 for Cisco Content Security Management Appliances User Guide
 
Chapter 8      Centralized Policy, Virus, and Outbreak Quarantines
  Troubleshooting Centralized Policy Quarantines
Manage by Rule Summary Link
Click the Manage by Rule Summary link next to the Outbreak quarantine in the quarantine listing to view 
the Manage by Rule Summary page. You can perform message actions (Release, Delete, Delay Exit) on 
all of the messages in the quarantine based on which outbreak rule caused the message to be quarantined. 
This is ideal for clearing out large numbers of messages from the Outbreak quarantine. For more 
information, see information about the Manage by Rule Summary view in the Outbreak Filters chapter 
in the online help or user guide for the Email Security appliance. 
Reporting False Positives or Suspicious Messages to Cisco Systems
When viewing message details for a message in the Outbreak quarantine, you can send the message to 
Cisco to report false positives or suspicious messages. 
Procedure 
Step 1
Navigate to a message in the Outbreak quarantine. 
Step 2
In the Message Details section, select the Send a Copy to Cisco Systems check box.
Step 3
Click Send
Troubleshooting Centralized Policy Quarantines 
Administrative User Cannot Choose Quarantines in Filters and DLP Message 
Actions
Problem
. Administrative users cannot see or choose quarantines in content and message filters or DLP 
actions on the Email Security appliance. 
Solution
. See 
Messages Released from a Centralized Outbreak Quarantine Are Not 
Rescanned 
Problem
Messages released from the Outbreak Quarantine should be scanned again before delivery. 
However, some contaminated messages have been delivered from the quarantine. 
Solution
This can occur under the situation described in