cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.0-698
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-404
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

1141
Views
0
Helpful
2
Replies
Enam Rahman
Beginner

Policy around EUQ Email Digest

A customer of mine wants to not send the EUQ email digest for distribution groups. For everyone else, they want to send the nightly/weekly digests. They have two ESAs and an SMA with external spam quarantine enabled. I think the answer is 'no' but I still want to double-check: is it possible to configure external spam quarantine is such a way that distribution groups e.g. ny.all@domain.com will not receive EUQ email digest, but everyone else will?

1 ACCEPTED SOLUTION

Accepted Solutions
brusso
Beginner

The Spam Quarantine Notifications have no options to target specific users.

Notifications will be sent for any message that is put in the Spam Quarantine.

Depending on your exact situation, there might be a way to avoid the Notifications going to specific addresses.  This would be to prevent having these emails go into the Spam Quarantine in the first place.

To do this create a new Incoming Mail Policy which contains the distribution lists as Members of the Policy.   

On this new Policy, you would adjust the Anti-Spam settings to something other than Quarantine   - for example adjust the Subject and deliver detected spam to the group, or re-direct them over to an admin account for review.

Some prefer to simply keep sending these, with the understanding that any member of the distribution list can use the Notification email to review and Release false positives.   Some prefer to Drop detected spam when it is sent to specific addresses (like distribution lists), but bear in mind that false positives cannot be recovered once they are Dropped.

Blake

Message was edited by: Blake Russo

View solution in original post

2 REPLIES 2
brusso
Beginner

The Spam Quarantine Notifications have no options to target specific users.

Notifications will be sent for any message that is put in the Spam Quarantine.

Depending on your exact situation, there might be a way to avoid the Notifications going to specific addresses.  This would be to prevent having these emails go into the Spam Quarantine in the first place.

To do this create a new Incoming Mail Policy which contains the distribution lists as Members of the Policy.   

On this new Policy, you would adjust the Anti-Spam settings to something other than Quarantine   - for example adjust the Subject and deliver detected spam to the group, or re-direct them over to an admin account for review.

Some prefer to simply keep sending these, with the understanding that any member of the distribution list can use the Notification email to review and Release false positives.   Some prefer to Drop detected spam when it is sent to specific addresses (like distribution lists), but bear in mind that false positives cannot be recovered once they are Dropped.

Blake

Message was edited by: Blake Russo

View solution in original post

dalthami
Cisco Employee

This can now be done.  The Cisco IronPort ESA and SMA can decide which users and groups receive digests.  

Content for Community-Ad