IronPort - daily management guide - AsyncOS 7.6.1

Chapter 4 Quarantines
OL-25138-01
Managing System Quarantines via the Graphical User Interface (GUI)
Early Expiration - a message is forced from the quarantine when the size limit for the quarantine is
reached. For more on setting size limits for quarantines, see Creating System Quarantines, page 4-6.
Messages released from quarantine because of a queue-full condition (early expiration) can
optionally have other operations performed on them. For more information, see When Allocated
Space is Exceeded Send Messages and:, page 4-5.
There are two Default Actions:
Delete - the message is deleted.
Release - the message is released for delivery. Upon release, the message is rescanned for viruses,
assuming anti-virus is enabled for that particular mail policy. For more information about virus
scanning and messages released from quarantines, see System Quarantines and Virus Scanning,
page 4-16.
Note In addition to these two default actions, a third message action (Delay Exit) is available in the Select
Action menu in the quarantined messages listing.
When Allocated Space is Exceeded Send Messages and:
Subject Tagging
Add X-Header
Strip Attachment
The When Allocated Space is Exceeded Send Messages and: section is used to dictate how messages are
handled as they are released from the quarantine due to overflow. These settings include: Subject
Tagging, Adding an X-Header, and Stripping Attachments.
Messages released or deleted from a quarantine because of a queue-full condition (early expiration only)
can optionally have their subjects tagged with text you specify when editing or creating a quarantine.
The tag is a user-defined string that can either be prepended or appended to the original subject header.
Note In order for a subject with non-ASCII characters to display correctly it has to be represented according
to RFC 2047.
Messages released or deleted from a quarantine because of a queue-full condition (early expiration only)
can optionally have an X-Header added.
Specify the name of the X-Header and the value.
Messages released or deleted from a quarantine because of a queue-full condition (early expiration only)
can optionally have their attachments stripped. This can be used to help reduce the chance for virus
infected files will be released from a quarantine.
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
4-5