Hi I have a requirement to quarantine a mail with a particular extension. Inbound is to be be user managed so the Spam Quarantine is the only location for it. Is there any way I can mark the mail so that it is logged if the recipient releases it. I know in the "euq_logs" I can get a username and MID # but this would be unworkable trying to manually link MIDs to their Subjects. Simple quarantining+releasing is working but its the reporting I'm after. Outbound will be dealt with by Helpdesk on request. Thanks Stephen
Requires M-series or centralized quarantine if you have multiple C-series
If you have an M-series being used to quarantine messages. If a message is released by a user, it needs to go through one of your C-series appliance. On the C-series you could create a filter to check if the connecting IP is your M-series then just set any action deliver, tag with some header.
This way, you could pull out a report based on content filters.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...