Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Reporting on releases from the EUQ

Hi
I have a requirement to quarantine a mail with a particular extension. Inbound is to be be user managed so the Spam Quarantine is the only location for it. Is there any way I can mark the mail so that it is logged if the recipient releases it. I know in the "euq_logs" I can get a username and MID # but this would be unworkable trying to manually link MIDs to their Subjects.
Simple quarantining+releasing is working but its the reporting I'm after.
Outbound will be dealt with by Helpdesk on request.
Thanks
Stephen

  • Email Security
2 REPLIES
New Member

Re: Reporting on releases from the EUQ

Here is one option:

Requires M-series or centralized quarantine if you have multiple C-series

If you have an M-series being used to quarantine messages. If a message is released by a user, it needs to go through one of your C-series appliance. On the C-series you could create a filter to check if the connecting IP is your M-series then just set any action deliver, tag with some header.

This way, you could pull out a report based on content filters.

Hope this helps!

New Member

Re: Reporting on releases from the EUQ

Thanks for that. Unfortunately the M series is in the future so this solution is currently possile for me.

Thanks

123
Views
0
Helpful
2
Replies
This widget could not be displayed.