Showing results for 
Search instead for 
Did you mean: 
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.0-698
Cloud Gateway Email Status Portal Support & Downloads
Email and Web Manager: 14.0.0-404
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in:
Encryption Bug Search
Encryption Plug-in:
Cloud Mailbox Notification Service
Outlook Add-in(s): More info


Spam Notifications

May I know is it possible to only send spam notifications to some of the users, instead of all users? Anybody can help? Many thanks!!


It is my understanding this is suppose to be part of a future upgrade. You can enable the End-User Quarantine Access which will allow users to go the web address ( and view their own spam. We use AD so we enabled the LDAP and the users don't have to remember a new user id / password. Just send the link to users you want to give access. While not perfect it works us....until they start sharing it with everyone, but by then we hope they'll have this as a feature.

Thanks for your reply! Do you think is it possible to filter out the unexpected recipients by setting up an outgoing content filter?


By default, ISQ notifications do not pass through the workqueue (filters, etc...). So, you cannot setup filters for these messages.

AFAIK, you could filter this if you use centralized quarantine (either an M-series appliance or a secondary IronPort).


- C-series forwards all Spam quarantine messages to M-series (M-series IP listed as centralized quarantine)
- Setup a new interface/IP on the M-series and set the old IP for a /32 subnetmask. This way all deliveries will be forced out of the new IP to the C-series appliance.
- Set the new IP of M-series in relaylist and then create an outgoing filter with your conditions.

Secondary C-series with centralized quarantine:

- If your Secondary C-series used a different interface/IP for notification delivery then list this IP in the relaylist of the other C-series and apply outgoing filter with your conditions.


Thanks for your information!!

Content for Community-Ad