cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
451
Views
0
Helpful
2
Replies

CEO Spam filtering

pbutler
Level 1
Level 1

Hi. My question is somewhat basic yet possibly interesting. I have a content filter that filters for spoofed email addresses from C-Level users. Any email that comes in that attempts to spoof one of the addresses, is placed into a special quarantine and a notification is sent to the executive assistant. Her is the issue. In the normal Spam quarantine the users can be then sent an email notifying them that an email is held and gives them an option to release. In any other quarantine they do not get this option. In my case, the executive assistant gets an email with the header data but no links to release the email. Interestingly, I cannot have the content filter send the email to the Spam folder so that the email gets sent notifying. Am I missing something where I can store the emails in this special location and send a link to allow the executive assistant to release the email?

2 Replies 2

There isn't a "special location" that you can allow users access.
If you want to quarantine a message to the spam quarantine, you can add the "X-IronPort-Quarantine" header to the message and it will get quarantined.
And if you want to honor users' Safelist, you can check the value of the "X-SLBL-Result" header. If the user added the sender to a safelist, it should show up as "SAFE-LISTED"


Udupi Krishna.
Cisco Employee
Cisco Employee

There were other customers who asked for this feature and its being tracked via enhancement - CSCvy93670

It's probably not on development team's priority list at the moment. You can always follow the workaround which @Ken Stieers recommended.