About the quarantine

Products

• Mail Security for Microsoft Exchange

Issue/Introduction

 

Resolution

Mail Security provides the following options for quarantining messages:

Local quarantine

You can choose to send infected messages and attachments to the local quarantine when you configure Mail Security policies. You can also configure policies to quarantine the messages that trigger violations. See Establishing local quarantine thresholds See Viewing the contents of the local quarantine See Deleting items from the local quarantine

Quarantine Server

You can forward the infected files that are in the local quarantine to the Symantec Quarantine Server, if it is set up on your network. Mail Security forwards infected files to the Quarantine Server at 60-minute intervals. Files that are sent to the Quarantine Server are then forwarded to Symantec for analysis in real-time using HTTPS communications. Symantec automatically distributes updated definitions to the Quarantine Server when they are available. The Quarantine Server is a component of Symantec AntiVirus Central Quarantine. Mail Security supports version 3.4 or later of the Symantec AntiVirus Central Quarantine Server. Version 3.4 is provided on the Mail Security CD in the following location and must be installed separately: \ADMTOOLS\DIS See the Symantec Central Quarantine Administrator's Guide for more information about the Symantec AntiVirus Central Quarantine, which is located on the product CD in the following location: \DOCS\DIS\CentQuar.pdf Note: Files that contain non-viral threats, are unscannable, or violate content or file filtering rules are not forwarded to the Quarantine Server.