SMA Quarantine Configuration!

[mannygawadcco]

I have 1 SMA and 2 ESA, everything is working fine like, reporting, filtering, PVO, etc.. except for the centralized quarantine, i have configured the centralized quarantine for both ESA and pointed it to SMA, but i am not seeing any quarantine email in my SMA. What could be the issue.

Whenever I click the Quarantine link from SMA, its showing that the page cannot be found.

Can anyone share with me the step-by-step configuration of Centralized quarantine INCLUDING TESTING.. 

Thanks,

[Libin Varghese]

Hi,

Step by step instructions for configuring centralized services are available in the end user guides.

https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma10-0/SMA_10-0_User_Guide.pdf

Setting Up the Centralized Spam Quarantine (Page 7-2)
Centralizing Policy, Virus, and Outbreak Quarantines (Page 8-3)

I would start by confirming if traffic is allowed from the ESA to the SMA to deliver emails to the quarantine.
Spam quarantine by default uses port 6025 and centralized PVO uses port 7025.

You can telnet to the SMA using the above ports to confirm connectivity.

For the page cannot be found error, you could try a different browser, confirm if http/https and spam quarantine access is enabled on the IP interface of the SMA.

Regards,
Libin Varghese

[mannygawadcco]

Please note that SMA and EsA are on the same vlan. And all http/https and spam quarantine are enabled. I have done the procedure in the end users guide but no luck.

whenever i opened the spam quarantine in sma it will open new browser pointing to https://sma:83, but no content, showing not found... i habe even change it to its IP address like https://1.1.1.1:83 but it didn't work as well.

[Libin Varghese]

If the spam quarantine URL displays page not found we would need to check the configuration on the SMA.

However, if the spam quarantine opens and just does not have any spam emails listed when you attempt to search that would indicate spam emails were not delivered to the SMA.

You can review the message tracking details for the spam emails to see if they were delivered to the SMA or sent to the local quarantine on the ESA.

- Libin V

[mannygawadcco]

Thanks livin,

where can i check if its not showing any page content in the URL?

can i have the troubleshooting docs for further message tracking to see the root cause of the issue.

thanks,

[Libin Varghese]

I do not see a troubleshooting article for this particular scenario.

You can certainly open a TAC case to get the SMA checked.

- Libin V