cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2570
Views
0
Helpful
2
Replies

Spam notification to all users

Frank Osberg
Level 4
Level 4

Hi guys,

 

I have a issue that I am hoping that you can help me fixes.

 

Today we have our spam quarantine enable on our C390 and what we would like to have it this..

 

1: We dont won't end users to have access to the gui so they can release the mails them self. So we have disable the End-User Quarantine Access. 

2: We want the end user to get the notification from the ESA so we have spam notifications enable, but now the issue starts. 

image.png

And we have put in a bounce adr. 

image.png

But right now the mails are only going to the bounce mail and the end user... that I dont get.

If I do enable the End-User Quarantine Access, the end user will get a mail like this:

image.png

 

So why is this? And how to fixs this so end user will get mail without given them access to the spam function. 

 

Looking forward to hear ideas here. 

 

2 Replies 2

ppreenja
Cisco Employee
Cisco Employee
Hi Frank,

Some mail clients (primarily some versions of Outlook) show this when there is a mismatch between the From address and the Envelope Sender address in the headers of the message.

The 'on behalf of' is being added by the mail server since the headers do not match. The workaround for this on the IronPort device is to make the friendly From address in the spam notifications match the address specified in the 'Deliver Bounce Messages To' field. These settings are in the Monitor > Quarantines> IronPort Spam Quarantine > Spam Notification page in the GUI.

I hope this helps.

Cheers,
Pratham

Cristian Matei
VIP Alumni
VIP Alumni

Hi,

 

    If you want users to receive Spam notifications but not be able to perform any action, even see the e-mails, you should be able to do it by customising the message body, and removing what you don't want to be in there:

https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-0/user_guide/b_ESA_Admin_Guide_13-0/b_ESA_Admin_Guide_12_1_chapter_0100000.html#task_1483408

 

Regards,

Cristian Matei.