Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Important! Before configuring the Mailbox Auto Remediation settings, review 

Submit and commit your changes. 

You can configure the appliance to quarantine files sent for analysis instead of releasing them 
immediately to the workqueue. Quarantined messages and their attachments are rescanned for threats 
upon release from quarantine. If the message is released after file analysis results are available to the 
reputation scanner, any identified threats will be caught during rescanning.

Select Mail Policies > Incoming Mail Policies.

Click the link in the Advanced Malware Protection column of the mail policy to modify.

Under Messages with File Analysis Pending section, select Quarantine from the Action Applied to 
Message drop-down.

The quarantined messages are stored in the File Analysis quarantine. See 

.

(Optional) Under Messages with File Analysis Pending section, choose the following options:

Whether to archive the original message. Archived messages are stored as an mbox-format log file 
in the 

amparchive

 directory on the appliance. The preconfigured AMP Archive (

amparchive

) log 

subscription is required.

Whether to warn the end user by modifying the message subject, for example, “

[WARNING: 

ATTACHMENT(S) MAY CONTAIN MALWARE]

.”

Whether to add a custom header to provide granular controls to the administrator.

Submit and commit your changes. 

Select Monitor > Policy, Virus, and Outbreak Quarantines.

Click the File Analysis quarantine link.

Specify the retention period.