Cisco Cisco Email Security Appliance C160 ユーザーガイド
10-27
Cisco IronPort AsyncOS 7.5 for Email Configuration Guide
OL-25136-01
Chapter 10 Outbreak Filters
Figure 10-6
The Outbreak Quarantine
Monitoring the Outbreak Quarantine
Though a properly configured quarantine requires little if any monitoring, it is a
good idea to keep an eye on the Outbreak Quarantine, especially during and after
virus outbreaks when legitimate messages may be delayed.
good idea to keep an eye on the Outbreak Quarantine, especially during and after
virus outbreaks when legitimate messages may be delayed.
If a legitimate message is quarantined, one of the following occurs depending on
the settings for the Outbreak quarantine:
the settings for the Outbreak quarantine:
•
If the quarantine’s Default Action is set to Release, the message will be
released when the retention time period expires or when the quarantine
overflows. You can configure the Outbreak quarantine so that the following
actions are performed on messages before they are released due to overflow:
strip attachments, modify the subject, and add an X-Header. For more
information about these actions, see the “Quarantines” chapter in the Cisco
IronPort AsyncOS for Email Daily Management Guide.
released when the retention time period expires or when the quarantine
overflows. You can configure the Outbreak quarantine so that the following
actions are performed on messages before they are released due to overflow:
strip attachments, modify the subject, and add an X-Header. For more
information about these actions, see the “Quarantines” chapter in the Cisco
IronPort AsyncOS for Email Daily Management Guide.
•
If the quarantine’s Default Action is set to Delete, the message will be deleted
when the retention time period expires, or when the quarantine overflows.
when the retention time period expires, or when the quarantine overflows.
•
Overflow occurs when the quarantine is full and more messages are added. In
this case the messages closest to their expiration date (not necessarily the
oldest messages) are released first, until enough room is available for the new
messages. You can configure the Outbreak quarantine so that the following
actions are performed on messages before they are released due to overflow:
strip attachments, modify the subject, add an X-Header.
this case the messages closest to their expiration date (not necessarily the
oldest messages) are released first, until enough room is available for the new
messages. You can configure the Outbreak quarantine so that the following
actions are performed on messages before they are released due to overflow:
strip attachments, modify the subject, add an X-Header.