IronPort - daily management guide - AsyncOS 7.6.1

Chapter 4 Quarantines
Deleting Messages from the Cisco IronPort Spam Quarantine
OL-25138-01
Working with Safelists and Blocklists
The Cisco IronPort Spam quarantine can be configured to automatically delete messages after a certain
amount of time. Also, the Cisco IronPort Spam quarantine can be configured to automatically delete the
oldest messages once the quarantine has reached its maximum size. You may also delete messages from
the Cisco IronPort Spam quarantine manually.
To delete specific messages, click the checkbox next to the messages you want to delete and then select
Delete from the drop-down menu. Then click Submit. Click the checkbox in the heading row to
automatically select all of the messages currently displayed on the page.
To delete all of the messages in the Cisco IronPort Spam quarantine, disable the quarantine (see
Disabling the Local Cisco IronPort Spam Quarantine, page 4-19) and then click the Delete All Messages
link. The number in parenthesis at the end of the link is the number of messages in the Cisco IronPort
Spam quarantine.
Figure 4-25 Delete All Messages Link
Working with Safelists and Blocklists
You can enable end users to create safelists and blocklists to better control which emails are treated as
spam. Safelists allow a user to ensure that certain users or domains are never treated as spam, while
blocklists ensure that certain users or domains are always treated as spam. The safelists and blocklists
settings are configured from the Cisco IronPort Spam Quarantine, so you must enable and configure the
Cisco IronPort Spam Quarantine to use this feature. When you enable the safelist/blocklist feature, each
end user can maintain a safelist and blocklist for his or her email account.
Note Safelists and blocklists prevent mail from being treated as spam or ensure that mail is treated as spam.
However, a safelist or blocklist setting does not prevent the Cisco IronPort appliance from scanning an
email for viruses or determining if the message meets the criteria for a content-related mail policy. If a
message is part of a safelist, it may not be delivered to the end user depending on other scanning settings.
The Safelist/Blocklist Database
When a user adds an entry to a safelist or blocklist, the entry is stored in a database on the Cisco IronPort
appliance. If you use M-series, the database is saved on the M-series appliance and periodically updated
and synchronized on all related C-Series appliances. If the Cisco IronPort Spam Quarantine is hosted on
a C-series appliance, the safelist/blocklist database is maintained on that C-Series appliance. If you use
multiple C-Series appliances without an M-Series appliance, you may need to synchronize databases and
configuration settings manually. For information about synchronizing safelist/blocklist settings and
databases across different C-Series appliances, see Synchronizing Safelist and Blocklist Settings and
Databases, page 4-40.
For information about working with the backup .CSV database, see Backing Up and Restoring the
Safelist/Blocklist Database, page 4-40.
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
4-37