ESA C190 - create additional quarantines?

[ken.arcuri]

The SPF / DKIM / DMARC Recommended Deployment pdf suggests quarantining SPF softfail messages in the SPF quarantine.  How do you create other quarantines?  The only one I see is Policy (centralized).

[Libin Varghese · Accepted solution]

Hi Ken,

As you have centralized quarantines, you can login to the SMA to add additional Policy quarantines.

Navigate to Email -> Message Quarantine -> Policy, Virus and Outbreak Quarantines -> Add Policy Quarantine.

When using local quarantines on the ESA the same options are available under Monitor -> Policy, Virus and Outbreak Quarantines

Thank You!

Libin Varghese

[ken.arcuri]

Great.  Thank you both.  I found the path.  Been there looking at PVO messages, but never notice the Add button.  Thanks again.

[Ken Stieers]

Any quarantines you create will still be "Policy" quarentines, so your users won't be able to release from them.  If you want to let the users release, instead of a quarantine action, add a header with the name "x-quarantine" (I need to double check that, but you can search the forum for it) with a blank value.

[Libin Varghese]

To add to that inserting header "X-Ironport-Quarantine" redirects emails to the system spam quarantine.

- Libin V