Management Interface for Quarantine Access

[mykul]

I have a request to see if we can setup access for a specific user to see specific quarantined emails that are on our C300V. I have given the user access to the ironport but the the management interface for the ironport is on an IP subnet that is not accessible by the user. I really do not want to open up the subnet to the user for security reasons. Is it possible to create a management interface for the ironport so that the user can check the quarantine for messages. Or is there a better way of accomplishing what I want to do? All end users do not have access to their own quarantine and are not setup for quarantine notifications.

Thanks!

[Sriram Subramanian]

Hi,

You can configure multiple IP Interface on the ESA appliance to route the traffic through a different Data port on the ESA appliance.

On the data port, make sure to disable the spam quarantine access on the Management interface and enable on the data port:

    * Spam Quarantine HTTP
    * Spam Quarantine HTTPS

Instruction guide to do this is available here:

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html