IronPort - daily management guide - AsyncOS 7.6.1

Chapter 4 Quarantines
Configuring Spam Notifications
OL-25138-01
Configuring the Cisco IronPort Spam Quarantines Feature
Spam notifications are email messages sent to end users when they have messages in the Cisco IronPort
Spam quarantine. Notifications contain a listing of quarantined spam or suspected spam for the user (or
email addresses associated with that user in the LDAP repository, if user authentication is via LDAP, see
Configuring End User Quarantine Access, page 4-24). Notifications also include a link for users to use
to view their quarantined messages. Once enabled, notifications are sent according to the schedule set
here.
Spam notifications provide an alternative method for end-users to log into the quarantine. Users access
the quarantine through the email notification they receive (if notifications are enabled for the
quarantine). Clicking on any message subject logs the user into the web UI for the quarantine for the
email address to which that notification was sent. This method of accessing the Cisco IronPort Spam
Quarantine does not require LDAP or Mailbox authentication. Note that logging in through this method
will not display quarantined messages for any other aliases the end-user may have unless the appliance
is using a spam quarantine alias consolidation query for email notifications. If the notification was sent
to a distribution list that is expanded after processing by the Cisco IronPort appliance, then multiple
recipients may have access to the same quarantine for that list.
Because of the way the Cisco IronPort appliance generates spam notifications, users may receive
multiple spam notifications for their email aliases or if they use multiple email addresses. You can use
the alias consolidation feature to prevent some occurrences of multiple notifications. If you do not have
an LDAP server or an active alias consolidation query set up, click the System Administration >
LDAP link to configure your LDAP server settings and alias consolidation query string. For more
information, see “LDAP Queries” in the Cisco IronPort AsyncOS for Email Advanced Configuration
Guide, as well as Considerations for Deployment, page 4-30 and Receiving Multiple Notifications,
page 4-33 in this guide.
To configure spam notifications sent to end users:
Step 1 Enable spam notifications by checking the checkbox labeled Enable Spam Notifications.
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
4-25