I wanted to turn off getting notifications about quarantined emails sent to my email address as we have a shared email we use. I went to the DLP policy settings and removed the email address, but I am still getting the emails. Any ideas? We don’t use outgoing content filters for quarantine, we use them to block random stuff rather than PII, etc. We use DLP policies for PII.
The only place I could find the email addresses was under Mail Policies>DLP Policy customizations>Standard DLP message action. I am certain there is another place, but I cannot find it. I have looked for 2 hours. I even downloaded the config file for the ESA and did a search and my email address is not there. When I removed my email, I submit/commit and when I go back in there, it is gone. But when someone sends a test email, I still get the notification. We also have an SMA, but policy quarantines are not managed by it, just message tracking. That is another issue, but is it possible the setting is also on the SMA and that is why it is still sending?
Cisco C170, OS 11.03-251
