Safelist/white List an address at user end for quarentained mails at Ironport ?

[bsrinu001]

Hi Team,

How an user can whitelist/safe list an address if a mail from an address has been Spam Quarantined (local and central ) at Ironport end.

Also how an Ironport admin can do for a individual user ?

[Libin Varghese]

Hi,

An end user can make use of end user safelist/blocklist if that has been enabled by the administrator.

1. Log into Admin GUI
2. Go to Monitor >Quaratine
3. 2nd section with title "End-User Safelist/Blocklist (Spam Quarantine)"
4. Click Edit Settings
5. Check off "Enable End User Safelist/Blocklist Feature"
6. Verify with customer Blocklist Action and Maximum List Items Per User.
7. Show customer Help and Support then Online Help for access to "Working with Safelists and Blocklists"

From the admin stand point you could either create a message filter to skip spamcheck for emails when both sender and recipient match or create a separate incoming mail policy for sender and recipient to bypass anti-spam check.

Skip_Spam:

if (mail-from == abc@domain1.com) AND (rcpt-to == pqr@domain2.com)

{

skip-spamcheck();

}

Adding a separate incoming mail policy for the sender and recipient both to match would be a better option for emails with multiple recipients as incoming mail policy splinters emails based on recipient matches.

Thank You!

Libin Varghese

[gianluca.santoro]

Hi Libin,

to enable end user safelist/blocklist on the Security Management Appliance I had to Login to the Cloud Content Security Management Virtual Appliance then go under Management Appliance >> Centralized Services >> Spam Quarantine and then click on End-User Safelist/Blocklist enable.

Gianluca