Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Reporting on Spam Released from Quarantine

Hi all,

Does anyone have a clever way of reporting on what messages were released from the Spam Quarantine by users?

I know that I can get the information from the euq logs.  Just wondering if there is a more elegant way.

We are using an M160 appliance with the latest software.

Thanks!

- Steve

2 REPLIES
Community Member

Reporting on Spam Released from Quarantine

Run a Message Tracking report and in the Envelope Recipent put in spam@access.ironport.com

Community Member

Reporting on Spam Released from Quarantine

Hi Doug,

Thanks for the suggestions, but that didn't return any results.  If I use outlook_spam@access.ironport.com as the recipient address, I know when people are using the Outlook plug-ins to report missed spam, but that's not what I'm looking for.

You may assume (logically) that we are sending released spam to IronPort for analysis?  We are not, for fear that false positives may contain confidential customer data.

Thanks,

- Steve

792
Views
3
Helpful
2
Replies
CreatePlease to create content