IronPort - daily management guide - AsyncOS 7.6.1

Managing System Quarantines via the Graphical User Interface (GUI)
Allocating Space for System Quarantines
Retention Time
Default Action
4-4
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Chapter 4 Quarantines
There is a limited amount of space available for system quarantines, as they are created on the Cisco
IronPort appliance itself. The amount of available space for new quarantines is displayed on the Manage
Quarantines page. Messages are forced from the quarantine when the size of the quarantine reaches the
space allocated. For more information, see System Quarantine Settings, page 4-3.
Table 4-1 Space Available for Quarantines on Cisco IronPort Appliances
Cisco IronPort Appliance Storage Space Outbreak Filters Storage Space*
X1050/1060/1070 10GB 3GB
C650/660/670 10GB 3GB
C350/360/370 4GB 2GB
C150/160 2.5GB 1GB
* Additional space when licensing the Outbreak Filters feature.
The minimum size for a quarantine is 250MB.
Retention Time is the length of time messages are kept in a quarantine. The Default Action (see Default
Action, page 4-4) is performed on any message in the quarantine once that retention time is reached.
Each message has its own specific expiration time, displayed in the quarantine listing.
Messages are stored for the amount of time specified (Normal Expiration) unless they are manually
processed by a mail administrator (or other user) or the size limit set for the quarantine is reached. If the
size limit is reached, the oldest messages are processed (Early Expiration) and the Default Action in
performed for each message until the size of the quarantine is again less than the size limit. The policy
is First In First Out (FIFO). For more information about specifying quarantine size limits, see Creating
System Quarantines, page 4-6.
The expiration time on a message can be delayed (extended) via the Select Action menu in the various
quarantine listings. Delaying the expiration of a message can be helpful when you need to keep specific
messages in the quarantine past their scheduled expiration (for example, waiting for an administrator to
have time to review the messages or for a specific anti-virus IDE to be published).
Note The retention time for messages in the Outbreak Filters quarantine are configured in the appliance’s mail
policies.
The Default Action is the action performed on messages in a quarantine when either of the two following
circumstances occur:
Normal Expiration - the Retention Time is met for a message in the quarantine (see Retention Time,
page 4-4).
OL-25138-01