IronPort - daily management guide - AsyncOS 7.6.1

Configuring the Cisco IronPort Spam Quarantines Feature
4-18
To send a copy of a message to Cisco IronPort:
Step 1 On the Message Details page, mark the Send a Copy to IronPort Systems box:
Figure 4-12 Searching Quarantines
Step 2 Click Send. A copy of the message is sent to Cisco IronPort Systems.
Configuring the Cisco IronPort Spam Quarantines Feature
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
Chapter 4 Quarantines
Each Cisco IronPort appliance can have a local Cisco IronPort Spam quarantine enabled if the Cisco
IronPort anti-spam has been enabled. Each Cisco IronPort appliance can also refer to an external Cisco
IronPort Spam quarantine, configured on another Cisco IronPort appliance (typically an M-Series
appliance, see “The Cisco IronPort M-Series Security Management Appliance” chapter in the Cisco
IronPort AsyncOS for Email Configuration Guidefor more information).
However, when both the local and an external Cisco IronPort Spam quarantine is enabled the local Cisco
IronPort Spam quarantine is used.
Follow these steps to configure your Cisco IronPort appliance to send spam or suspect spam messages
to a Cisco IronPort Spam quarantine (local or external):
Step 1 Add an external Cisco IronPort Spam quarantine (see Configuring an External Cisco IronPort Spam
Quarantine, page 4-27) or enable and configure the local Cisco IronPort Spam quarantine (see
Configuring the Local Cisco IronPort Spam Quarantine, page 4-22). Configuring the local Cisco
IronPort Spam quarantine allows you to specify settings related to quarantine access, contents, and
behavior, notifications, authentication, and AsyncOS user access.
Step 2 If you are configuring the local Cisco IronPort Spam quarantine, edit an IP interface and enable the Cisco
IronPort Spam quarantine HTTP or HTTPS service (see Enabling the Cisco IronPort Spam Quarantine
HTTP/S Service on an IP Interface, page 4-28). Enabling the Cisco IronPort Spam quarantine HTTP/S
service allows you to access the quarantine.
Step 3 If you want to migrate from a local Cisco IronPort Spam quarantine to an external Cisco IronPort Spam
Quarantine, configure the anti-spam settings, set a shorter expiration time, and delete all of the remaining
messages in the local quarantine. (see Migrating from a Local Cisco IronPort Spam Quarantine to an
External Quarantine, page 4-20).
Step 4 Configure the anti-spam scanning options for the policy to send spam or suspect spam (or both) to the
Cisco IronPort Spam Quarantine (see Enabling Cisco IronPort Spam Quarantines for a Mail Policy,
page 4-29). This step is where you actually configure the system to quarantine spam or suspect spam.
Step 5 See Considerations for Deployment, page 4-30. This important section provides a wealth of additional
guidance and information about the Cisco IronPort Spam quarantine, including notifications,
authentication, and configuration of other related AsyncOS features.
OL-25138-01