How can Symantec DLP be set up to quarantine messages within SMTP Prevent and release them if needed?
Relevant versions: ALL
Currently the only DLP components that can natively quarantine items is Endpoint and Network Discover.
However, beginning with v12, there is a new Flex Response option for quarantining email items with SMTP Prevent. Please consult the Symantec_DLP_12.0_Email_Quarantine_Connect_FlexResponse_Implementation_Guide.pdf
This document gives the instructions necessary to implement this custom action. This document is included in the main documents zip file you can download from Symantec.