cisco CES

[q8sara]

Dear ,,,

In the quarantine list there is more than 15000 messages

and i need to search for only the one which was quarantine because of the Uncategorized URLs reason in the URL_Block content filter to release all of them

is that possible?

Thank you

[Libin Varghese]

I do not see that as an available option at the moment. Search across quarantines is currently limited to sender, recipient, subject, attachment and size.

Unless this filter had a dedicated policy quarantine you would need to use the available filters to locate and release those emails.

Regards,

Libin Varghese

[Mathew Huynh]

Hey q8sara,

If the emails are within a "Policy " quarantine that you created from content filter matches. You can click into the Quarantine in question (as long as you're the admin of the ESA/SMA) on the upper right you should have a 'search quarantine' function.

Here you can search by sender, recipient, subject.

If you know this bit of information about it - you can search here by the date range.

There is an option on the left after your search is done to take action on all on the page, or ALL that was found to release or delete accordingly.

This is the only availability that is seen from the administrator account going through the quarantine.

We however cannot search by the content or so, only by these variables provided.

I hope this clears it up - let us know if there is anything else.

In my screenshot below, i was searching my "Policy" quarantine for a sender address.

Regards,

Matthew

[q8sara]

Thank you for your help

Unfortunately we add the Uncatalogued URLs  to be quarantined  , but we notice that this was blocking a lot of legitimate emails and the users started to complain. and we have more that 15000 emails in the quarantine list.

I need to search for only the emails that has been quarantined for this reason ---> URL category: Uncategorized URLs, Condition: URL Category Rule.

so i can release them all for any user

I think its not possible to do that right ?

Regards,,,

[Mathew Huynh · Accepted solution]

Hello q8sara,

If all the emails are going into the one same quarantine - then we will not be able to do a search by that content filter or condition unfortunately.
If you put them all into a separate quarantine depending on which rule matched originally - then we could do something about it.

At this stage you will need to manually verify.
I apologise for the inconvenience.

Regards,
Matthew