cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.0-698
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.0.0-404
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

472
Views
0
Helpful
2
Replies

Reporting on releases from the EUQ

Hi
I have a requirement to quarantine a mail with a particular extension. Inbound is to be be user managed so the Spam Quarantine is the only location for it. Is there any way I can mark the mail so that it is logged if the recipient releases it. I know in the "euq_logs" I can get a username and MID # but this would be unworkable trying to manually link MIDs to their Subjects.
Simple quarantining+releasing is working but its the reporting I'm after.
Outbound will be dealt with by Helpdesk on request.
Thanks
Stephen

2 REPLIES 2
kyerramr
Beginner

Here is one option:

Requires M-series or centralized quarantine if you have multiple C-series

If you have an M-series being used to quarantine messages. If a message is released by a user, it needs to go through one of your C-series appliance. On the C-series you could create a filter to check if the connecting IP is your M-series then just set any action deliver, tag with some header.

This way, you could pull out a report based on content filters.

Hope this helps!

Thanks for that. Unfortunately the M series is in the future so this solution is currently possile for me.

Thanks

Content for Community-Ad