Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Though a properly configured quarantine requires little if any monitoring, it is a 
good idea to keep an eye on the Outbreak Quarantine, especially during and after 
virus outbreaks when legitimate messages may be delayed.

If a legitimate message is quarantined, one of the following occurs depending on 
the settings for the Outbreak quarantine:

If the quarantine’s Default Action is set to Release, the message will be 
released when the retention time period expires or when the quarantine 
overflows. You can configure the Outbreak quarantine so that the following 
actions are performed on messages before they are released due to overflow: 
strip attachments, modify the subject, and add an X-Header. For more 
information about these actions, see the “Quarantines” chapter in the Cisco 
IronPort AsyncOS for Email Daily Management Guide.

If the quarantine’s Default Action is set to Delete, the message will be deleted 
when the retention time period expires, or when the quarantine overflows.

Overflow occurs when the quarantine is full and more messages are added. In 
this case the messages closest to their expiration date (not necessarily the 
oldest messages) are released first, until enough room is available for the new 
messages. You can configure the Outbreak quarantine so that the following 
actions are performed on messages before they are released due to overflow: 
strip attachments, modify the subject, add an X-Header.