Hi Romain,
A message can end up in more than one quarantine for a variety of reasons. For example, if there is a filter created to quarantine emails that may contain offensive material to the "Policy" quarantine and a message is received which matches that filter and has an encrypted attachment that cannot be scanned for viruses, this email will end up in both the "Virus" and the "Policy" quarantine.
Note: The policies governing messages that reside in multiple quarantines are "conservative" in that they do not allow a message to be delivered from a quarantine, unless that message has been released from all of the quarantines in which it resides.
Although an email deleted from one of the quarantines would still display the email in the second quarantine, however it cannot be released as its actually a single message.
For example
17 Mar 2016 03:09:16 (GMT +04:00) Message 3738210 quarantined to Policy. Content filter AttachmentFilter.
17 Mar 2016 03:09:16 (GMT +04:00) Message 3738210 quarantined to Virus. Anti-Virus verdict ENCRYPTED.
27 Mar 2016 03:13:19 (GMT +04:00) Message 3738210 deleted from quarantine Policy after 864243 seconds. Reason: expiration.
28 Mar 2016 09:00:11 (GMT +04:00) Message 3738210 released from quarantine Virus after 971455 seconds. Reason: manually released.
28 Mar 2016 09:00:11 (GMT +04:00) Message 3738210 deleted from all quarantines.
Policy, Virus, and Outbreak quarantines (System quarantines) share a single pool of disk space, the size of which depends on the hardware model. Messages in multiple quarantines consume the same amount of disk space as a message in a single quarantine.
Regards,
Libin
