Skip to main content

Global Quarantine

To access Global Quarantine actions go to Products > Global Quarantine.

In Global Quarantine you can find the emails that triggered a message rule with a final action of Quarantine-Company. You need to fill in the search parameters and run a report to pull the quarantined emails matching your criteria.

Important

Quarantined emails are available for 30 days.

Emails released from quarantine are displayed in the Email Activity report with 0.0.0.0 as the sending IP.

75300_7_2.png

  1. Timespan - select a specific date range

  2. Quarantine - specify a quarantine tag. You can select between Spam, Virus or any custom tag created in custom quarantine

  3. Filters - show/hide search filters

  4. Run report - search for quarantined emails matching the parameters that you filled in

  5. Connection - specify the direction of the emails

  6. Content - fill in the following:

    • Sender - search for a specific sender

    • Recipient - search for emails sent to a specific mailbox

    • Title - search for emails with a specific subject line

    Note

    The system will use the values entered under Content to return both full or partial matches.

Once you hit the report button the results will be returned as shown below:

75300_8_2.png

Note

The report will contain the below columns, which can be filtered in or out from the dropdown menu next to the Subject column header.

  • Direction

  • Timestamp(UTC)

  • Timestamp(local)

  • Sender address

  • Sender IP

  • Subject

  • Recipient(s)

  • Size

  • Details

  1. Deny Options - take one the below actions for selected messages:

    • Deny sender - Block the email and any further emails sent to your server from the same sender.

    • Deny domain - Block the email and any further emails sent to your server from any address at the originating domain.

    • IP address - Block the email and any further emails sent to your server from any address at the originating IP address.

  2. Release options - take one of the below actions for the selected messages:

    • Release - removes the message from quarantine and places it in the receiver's inbox.

      Note

      This will have no effect on future emails from the same sender, domain or IP dress.

    • Safe sender - Release the email and add the sender's email address to your Global Safe List.

    • Safe domain - Release the email and add the sender's domain name to your Global Safe List.

    • IP address - Release the email and add the sender's IP address name to your Global Safe List.

  3. Color code - an indicator will be given to messages that trigger high spam scores. This will be either yellow for medium or red for severe.

    Warning

    Special care should be taken when managing these items.

  4. Select - select the message on this line in order to take action on it. Clicking on the top checkbox will select all messages returned by the report.

  5. More information - Safely preview a quarantined message.

    75300_9_2.png

    1. General - displays the following information:

      • Final action

      • Date

      • GUID - the sender email unique identifier

      • Sender IP

      • Size

    2. Actions - shows you the rules triggered by the message since received, the actions taken and relevant data.

    3. Attachments - provides information on the attachments contained by the email message.

    4. URLs - provides a list of all URLs contained in the email message.

    5. Headers - provides a detailed breakdown of all the message headers in this particular email.

    6. Preview - displays a safe preview of the email message.

    7. Message actions - provides three types of message actions:

      • Discard message - deletes the email message

      • Deny Options - provides the same options as it's namesake in the main Global Quarantine page.

      • Release Options -provides the same options as it's namesake in the main Global Quarantine page.

Review quarantined messages

  1. Specify a time span to view from the Timespan drop-down list.

  2. Specify the type of quarantine you want to search for from the Quarantine drop-down list.

  3. (optional) Click the emailsecurityfilters.png Filters button and further narrow down by a specific the sender, recipient, subject of the email or the email direction.

  4. Click the emaisecrunreport.png Run Report button.

View additional information on quarantined messages.

To see more detail about a quarantined message, click thedetails.png icon next to the message. The Message Detail window will be displayed.

Preview quarantined messages

To safely preview a quarantined message click the email's subject in the Global Quarantine screen.

Categorize quarantined messages

  1. Click thedetails.png icon next to the message. The Message Detail window will be displayed.

  2. Click either Delete, Deny or Release.

Send a copy of a quarantine message

  1. Select the email by checking the box emailsecuritycheckbox.png at the left side of the row.

  2. Type in the email of the recipient in the textbox at the top of the Results section.

    88804_1.png

  3. Click the Send Copy button.

In this section: