Specifying an action to take when a quarantine threshold is met

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

Symantec Mail Security for Microsoft Exchange (SMSMSE) sends large amounts of notification emails when a quarantine threshold is met.

Cause

The notifications are being sent per the settings in SMSMSE.

Resolution

You can define thresholds for the local quarantine and specify the actions that you want Mail Security to take when a quarantine threshold is met.

You can specify any of the following actions:

• Notify Administrator - Sends a notification message to the administrator when a threshold is met. This item is checked by default.
• Notify Others - Sends a notification to the other recipients you specify when a threshold is met.
• Delete oldest items - Removes the oldest items in the local quarantine when a threshold is met.

To specify an action to take when a quarantine threshold is met:

1. In the console, on the primary navigation bar, click Monitors.
2. In the sidebar under Views, click Quarantine Settings.
3. Under When a threshold is met, check Notify Administrator to send notification messages to the administrator. Uncheck this box if you do not wish to send the notifications.
4. Check Notify others to send notification messages to additional people.
5. In the Notify others box, type the email addresses of the people to whom you want Mail Security to send notifications.
6. Check Delete oldest items to remove the items that reach a threshold.
   • This option is not enabled by default.
   • If Delete oldest items is not checked and a quarantine size threshold is reached, the event is logged. Mail Security sends a notification to the recipients that are specified on the Quarantine Settings page.
7. Under Administrator Notification, in the Subject Line box, type your subject line text.
   • The default text is: Administrator Alert: The Symantec Mail Security Quarantine has exceeded a set limit.
8. In the Message Body box, type the administrator notification message body.
   • The default test is: You should manage the Quarantine to remove files or change the Quarantine settings. Details %details%.
   • You can use variables in the message body.
9. On the toolbar, click Deploy changes to apply your changes.