Hi Lynn,
You can track information related to these messages via the mail logs on your appliance. When a message is tagged for VOF quarantine you will see something similar to this.
"Message quarantined in the Outbreak quarantine as a result of rule 'ADAPTIVE_RULE".
When the message is released you would see something similar to this.
released from quarantine Outbreak after XXXXXXX seconds. Reason: expiration
where XXXXXXX is a numeric value in seconds. If the message is manually release of course the Reason code would state that.
In both cases you should see a MID for the message which you can use to search for specifics,
example.com> grep
Currently configured logs:
16. "mail_logs" Type: "IronPort Text Mail Logs" Retrieval: FTP Poll
Enter the number of the log you wish to grep.
[]> 16
Enter the regular expression to grep.
[]> MID 565566
Do you want this search to be case insensitive? [Y]>
Do you want to tail the logs? [N]>
Do you want to paginate the output? [N]>
Christopher C Smith
CSE
Cisco IronPort Customer Support
