Reporting on releases from the EUQ

[smacloug_ironport]

Hi
I have a requirement to quarantine a mail with a particular extension. Inbound is to be be user managed so the Spam Quarantine is the only location for it. Is there any way I can mark the mail so that it is logged if the recipient releases it. I know in the "euq_logs" I can get a username and MID # but this would be unworkable trying to manually link MIDs to their Subjects.
Simple quarantining+releasing is working but its the reporting I'm after.
Outbound will be dealt with by Helpdesk on request.
Thanks
Stephen

[kyerramr]

Here is one option:

Requires M-series or centralized quarantine if you have multiple C-series

If you have an M-series being used to quarantine messages. If a message is released by a user, it needs to go through one of your C-series appliance. On the C-series you could create a filter to check if the connecting IP is your M-series then just set any action deliver, tag with some header.

This way, you could pull out a report based on content filters.

Hope this helps!

[smacloug_ironport]

Thanks for that. Unfortunately the M series is in the future so this solution is currently possile for me.

Thanks