possible to use spam quarantine with incoming content filters?

[kelvin ortega]

Is there a way to send the emails that my incoming filter identifies to the SPAM quarantine?

I require the user to be able to see the quarantine and check himself if he needs to release his emails.

Otherwise, there is a way to enable the user to consult the centralized quarantine to perform these actions.

Thanks in advance.

[José L. Dávila]

Hello there,

Here you will find a guide to configure Spam quarantine end user access so they are able to access emails which were quarantined by spam engine: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.pdf

Hope this helps. 

[José L. Dávila · Accepted solution]

And here is a guide to send emails to the spam quarantine using content filters: https://www.cisco.com/c/en/us/support/docs/security/secure-email-threat-defense/218369-use-content-filter-to-divert-emails-to-t.pdf

[Ken Stieers]

Yes.

For mail you want to to quarantine in the user accessible Spam Quarantine you need to add an action to the content that ads the header X--Ironport-Quarantine with no value.

Note that doing this will make the mail ignore the safelist.

[kelvin ortega]

Thank you very much for your answers, they helped me a lot.