Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Auditing users ( release , delete from quarantines )

Hi,

We are using Appliance C- Model.
Some local users are configured for checking quarantines in order to release or delete emails.
My question is :

Is it possible to have reporting or auditing in order to know for example : User1 has released emails with subject xxx from Quarantine Q1 on 3/11/2009 at 10:25

I have checked mail_logs but not enough information. Also it is not user friendly :wink:

Regards

7 REPLIES
New Member

Re: Auditing users ( release , delete from quarantines )

up...

Re: Auditing users ( release , delete from quarantines )

ran into the same problem, let me know if you figured somethign out.
thanks.

New Member

Re: Auditing users ( release , delete from quarantines )

I also wish there would be something like quarantine auditing log !

I don't know any easy way but some info can be also found from euqgui_logs

for example release of message is shown in the following way:

Fri Sep 11 08:09:18 2009 Info: req: user:User1 id:7WQZhqMvm8Z60kVhQP9t 303 GET /Message?action=&screen=Message&page=&mid=368522&action%3ARelease=Release HTTP/1.1 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/530.5 (KHTML, like Gecko) Chrome/2.0.172.43 Safari/530.5


At least you will see time stamp, user name and message ID. By using the message ID you can get more info from mail logs.

Yes, it's a painful process....

New Member

Re: Auditing users ( release , delete from quarantines )

maybe they could also add a 'comments' field to the administrator's release buttons? who knows - in any case great ideas!

check this link out on submitting your awesome feature ideas to us:
http://tinyurl.com/mm8r26

New Member

Re: Auditing users ( release , delete from quarantines )

Hi,

Thanks for the tips with euqguilogs however it is not user friendly :-)
I have sent a feature request to IronPort Support. Logically they are working on a new feature like auditing due to same questions.

I hope that feature will be in the next updates.

I keep you informed

New Member

Re: Auditing users ( release , delete from quarantines )

Thanks IT for having effort to create a feature request, more customers want this, sooner it might come (I hope) :wink:

New Member

Re: Auditing users ( release , delete from quarantines )

yea the more you guys open cases with ironport support and hook up to the feature request (same one and no duplicates hopefully **fingers crossed**) - the easier it is for the product management and support staff to recognize what are the most important requests to focus on and implement.

so if there's something that really bugs you guys - don't hide it inside - shout it out! well, don't shout - maybe just be kind of excited about it...

happy t-day!

andrew

222
Views
0
Helpful
7
Replies