Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Email Security Quick-links: ESA Product Support | SMA Product Support | Email Submission and Tracking Portal | Cisco SecurityHub
Current General Deployment (GD) Releases:
ESA: 11.0.0-264 WSA: 10.5.1-296 SMA: 11.0.0-115 Email Plug-in (Reporting): 1.0.1-048 Email Plug-in (Encryption): 1.0.0-036

New Member

Reporting Spam False Positives when using off-box quarantine

We use an off-box quarantine for SPAM.  When looking at the quarantine, I have 2 options; release or delete.

Does releasing the email trigger a 'Report as False Positive' type of event or do I have to report it separately?  It would be far easier to report separately if there was a forward a copy option.

I am using 7.9.0-107 on my m1060 and 7.6.3-019 on my c670



Cisco Employee

Hello Greg,on your spam

Hello Greg,

on your spam quarantine when you click into the settings

There should be a little button called:

"Notify Cisco Upon Message Release" with a tick-box.

Tick this option.

When you release the email to the end recipient, a copy will be sent to our automated spam database as well to be reviewed.


Once done and you would like to know the status of the review if it's been corrected by the automated process, or if it requires further intervention due to the issue still being seen, you can open a TAC case with us and let us know of the original sender of the email and/or subject of the email so we can have it checked up for you.



This option is applicable on both the M series and C series.

So you can enable this on the M series device as you're using an off-box quarantine.


I hope this helps.