Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

The default action is performed on messages in a policy, virus, or outbreak quarantine when any situation 
described in 

, occurs. 

There are two primary default actions:

Delete—The message is deleted.

Release—The message is released for delivery. 

Upon release, messages may be rescanned for threats. For more information, see 

. 

In addition, messages released before their expected retention time has passed can have additional 
operations performed on them, such as adding an X-Header. For more information, see 

. 

Messages released from a centralized quarantine are returned to the originating Web Security 
appliance for processing. 

Before you use quarantines, customize the settings of the default quarantines, including the Unclassified 
quarantine. 

If you are editing an existing quarantine, see 

Understand how messages in quarantines are automatically managed, including retention times and 
default actions. See 

, and 

Determine which users you want to have access to each quarantine, and create users and custom user 
roles accordingly. For details, see 

. 

Choose Email > Message Quarantine > Policy, Virus, and Outbreak Quarantines.

Do one of the following: 

Click Add Policy Quarantine. 

Click a quarantine to edit. 

Enter information. 

Keep the following in mind: