End user releasing own emails based on Policy/Content
New to this forum and my first post so hello to all We recently installed a couple of C360 and an M series and they all are working well. We have also setup Profanity based filtering and as a result many swear words are being rejected. This is setup using dictionaries.
But we are also getting a high number of false positives and as a result our Techsupport team is inundated with requests to release emails. I know with SPAM Quarantine there is End-User Quarantine Access but I don’t see this with Policy Quarantine.
The end result I want is for end users to release their own emails blocked based on profanity.
Re: End user releasing own emails based on Policy/Content
Welcome aboard Ivan!
The main reason there is a separation between ironport spam quarantine(isq) and policy quarantine(aka system quarantine) is that ISQ is mainly used in conjunction with the anti-spam verdict/results. While policy quarantine is used as a result of administrative/company policy(e.g. like a profanity dictionary filter in your case).
Another difference between the two is ISQ is accessible by the end user. Policy quarantine is accessibly only by the admin of the machine.
Now, there is a way to tweak it so that the content filter sends it over to the ISQ. Now keep in mind by doing this, you're mixing profanity filter verdicts with anti-spam results. It may be confusing for the end user unless you preprend the profanity stuff with "[Contains profanity]" at the beginning of the subject line.
This Cisco IronPort support portal KB article goes over how to send content filter results over to the ISQ.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...