Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 437
C H A P T E R
 
7-1
AsyncOS 8.1 for Cisco Content Security Management User Guide
 
7
Managing the Cisco IronPort Spam Quarantine
  •
  •
  •
 
  •
  •
  •
Understanding the Cisco IronPort Spam Quarantine
A Cisco IronPort Spam Quarantine holds spam and suspected spam messages for email users in your 
organization. The spam quarantine provides a safeguard mechanism for organizations that are concerned 
about “false positives” — that is, legitimate email messages that are quarantined or deleted as spam. This 
feature allows end users and administrators to review messages that are flagged as spam before making 
a final determination. In addition, if you enable the safelist/blocklist feature, end users (email users) can 
exercise control over which messages are marked as spam. 
Note
Policy, virus, and outbreak quarantines are distinct from the spam quarantine. For more information, see 
the documentation for your Email Security appliance an
A local Cisco IronPort Spam Quarantine resides on an Email Security gateway appliance. You can also 
have messages sent to an external Cisco IronPort Spam Quarantine, which resides on a separate content 
security appliance — typically a Cisco Content Security Management appliance. 
Note
You can implement end user access to the Cisco IronPort Spam Quarantine only for specified users or 
groups of users. Also, after you initially implement end user access, you might later decide to disable 
access if end users rarely view and release messages in the quarantine.
You can configure AsyncOS to send a notification email to end users, informing them of quarantined 
spam and suspected spam messages. The notification contains a summary of the messages currently in 
the Cisco IronPort Spam Quarantine for that user. The user can view the messages and decide whether 
to have them delivered to the Email Inbox or delete them. Users can also search through their quarantined 
messages. Users can access the quarantine through the notification message, or they can access the